It Resilience Manager

At Burberry, we believe creativity opens spaces. Our purpose is to unlock the power of imagination to push boundaries and open new possibilities for our people, our customers and our communities. This is the core belief that has guided Burberry since it was founded in 1856 and is central to how we operate as a company today.

We aim to provide an environment for creative minds from different backgrounds to thrive, bringing a wide range of skills and experiences to everything we do. As a purposeful, values-driven brand, we are committed to being a force for good in the world as well, creating the next generation of sustainable luxury for customers, driving industry change and championing our communities.

The IT Resilience Manager helps ensure Burberry's technology services can withstand, respond to and recover from disruptive events. The role provides resilience expertise, assurance and governance across critical services, working with service owners, platform teams, SIAM, cyber security, business continuity and third-party partners.

• IT Resilience Policy: setting the overarching governance, principles, roles, assurance expectations and minimum requirements for technology resilience across critical services.
• Cyber Resilience Policy: ensuring technology services can withstand and recover from cyber-led disruption, including ransomware, destructive attacks, compromised identities and loss of integrity or availability.
• IT Disaster Recovery Policy: ensuring technology services can be restored following disruption through effective recovery planning, recovery objectives, testing, evidence and recovery governance.
• IT Backups Policy: establishing minimum requirements for backup coverage, frequency, retention, protection, restoration testing, evidence and ongoing assurance for critical data and technology services.

The role ensures the IT Resilience policy framework is practical, embedded and aligned to business priorities. Service owners remain accountable for maintaining service-specific recovery capability, while the IT Resilience Manager sets expectations, reviews evidence, tracks gaps and reports on organisational readiness.

The role also leads the annual IT resilience and cyber recovery exercise and supports alignment with wider Business Continuity and Cyber Incident Response activities.

• Maintain a view of critical business services and supporting technology dependencies, ensuring recovery priorities, resilience requirements and recovery approaches reflect business impact.
• Maintain the IT Resilience policy framework, including the overarching IT Resilience Policy and supporting Cyber Resilience, IT Disaster Recovery and IT Backups policies.
• Define clear minimum requirements for recovery planning, backup arrangements, resilience controls, testing, evidence, recovery objectives and reporting.
• Ensure resilience requirements address cyber-led disruption scenarios, including ransomware, destructive attacks, compromised identities, data loss and major service outages.
• Review ITDR plans developed by service owners, platform teams and third-party partners, ensuring they are complete, current and aligned to policy, standards and recovery requirements.
• Review ITDR test plans and test outcomes to confirm recovery activities are appropriately scoped, evidenced and aligned to agreed RTOs, RPOs and business recovery priorities.
• Oversee the annual IT resilience and cyber recovery exercise to test cross-service response, recovery coordination, escalation and decision-making.
• Conduct monthly assurance reviews of recovery plans, backup status, resilience controls, test activity, open risks and overdue remediation actions.
• Maintain resilience reporting for critical technology…