Cyber Business Analyst : Business Resilience – Energy Trading

Contract:

Contract

Location:

London, Waterloo Pay:
Competitive Consultant:
Vadim Goss This is an exciting opportunity for a Business Resilience Business Analyst to a join a world-leading Energy Trading & Commodities company as part of their Cyber Resilience Programme.

Location:

London, United Kingdom (Hybrid – minimum 3 days per week in office)

Start Date:

ASAP Rate:
Competitive PAYERole

Purpose:

The Business Resilience Business Analyst is responsible for supporting the transition of the Cyber Resilience Programme from project delivery into sustainable Business-As-Usual (BAU) operations across Trading & Supply.

The role acts as the central custodian for resilience artefacts, playbooks, manual workarounds, testing schedules, resilience documentation and governance, ensuring that outputs delivered through the programme are ope rationalised, maintained and continuously improved within the broader T&S Business Resilience Framework.

Working across all Lines of Business, Functions, IDT teams and the CRISP programme, the role ensures that resilience capabilities developed during the programme can be effectively run, maintained, tested and governed beyond programme closure.

Key Accountabilities:

Business Resilience Framework Integration:
• Support the incorporation of Cyber Resilience Programme outputs into the wider T&S Business Resilience Framework.
• Define and establish sustainable ownership models for resilience artefacts and capabilities.
• Ensure programme deliverables are transitioned into BAU governance, processes and operating models.
• Support the development of enduring resilience standards, processes and controls.
• Maintain alignment between CRP outputs, CRISP requirements and existing Business Resilience frameworks.

Run & Maintain Model Development:
• Lead the development of the long-term Run & Maintain approach for cyber resilience capabilities across T&S.
• Establish governance, review cycles and ownership models for resilience artefacts.
• Define ongoing maintenance requirements for:
• Cyber Playbooks
• MVC Documentation
• Manual Workarounds
• Critical Role Lists
• Recovery Documentation
• Testing and Exercising Plans
• Ensure resilience documentation remains current, tested and fit for purpose.
• Work with business owners to embed accountability for ongoing maintenance activities.

Playbook & Resilience Artefact Governance:
• Serve as the central focal point for management, review, publication and communication of Cyber Playbooks across T&S.
• Maintain version control, approval workflows and document repositories.
• Coordinate regular reviews and updates.
• Ensure consistency of resilience documentation across all LOBs.
• Monitor compliance with agreed review and approval cycles.

Testing & Exercising Management:
• Own and maintain the Cyber Resilience Testing and Exercising Schedule.
• Coordinate exercises across T&S business units and functions.
• Track findings, recommendations and remediation actions.
• Ensure testing activities are aligned with Business Resilience Framework requirements.
• Support readiness assessments and maturity reporting.

MVC & Manual Workaround Management:
• Manage workflows associated with maintaining Minimum Viable Company (MVC) documentation.
• Coordinate annual reviews and updates of manual workaround procedures.
• Monitor documentation completeness, quality and ownership.
• Support businesses in maintaining resilience artefacts as part of BAU operations.
• Track outstanding actions required to maintain resilience readiness.

Business Analysis & Continuous Improvement:
• Analyse resilience processes and identify improvement opportunities.
• Support development of resilience metrics, KPIs and reporting.
• Facilitate workshops and stakeholder engagement sessions.
• Gather and document resilience…