Head of Cyber Resilience

This role requires a rare combination of executive leadership, regulatory expertise, business partnership, and hands‑on resiliency experience. The ideal candidate has built their career within operational resilience, business continuity, disaster recovery, crisis management, and cyber resilience functions and possesses the executive presence to engage Boards, regulators, and senior business leaders while maintaining deep involvement in program execution and continuous improvement. The successful candidate will elevate an established resiliency program, strengthen enterprise engagement, and help embed resilience as a core business capability across the organization.

• Develop and execute a comprehensive operational resilience strategy aligned with business objectives, regulatory expectations, and industry best practices.
• Establish and monitor resilience objectives, key risk indicators (KRIs), key performance indicators (KPIs), and governance frameworks.
• Drive enterprise-wide adoption of resilience principles across business and technology organizations.
• Continuously assess emerging threats, industry trends, and regulatory developments to enhance resilience capabilities.
• Lead enterprise-wide Business Continuity Planning (BCP) and Disaster Recovery (DR) programs.
• Ensure critical business functions maintain appropriate recovery capabilities and operational readiness.
• Oversee business impact analyses, recovery planning, recovery testing, and continuous improvement initiatives.
• Partner closely with technology leadership to ensure Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) are effectively defined, tested, and achieved.
• Oversee enterprise incident management and cyber resilience frameworks.
• Lead crisis response planning, cyber recovery exercises, and enterprise-wide tabletop simulations.
• Ensure effective coordination during operational disruptions involving technology, cybersecurity, third parties, and business operations.
• Integrate cyber resilience practices into broader operational resilience and risk management programs.
• Ensure compliance with applicable regulatory requirements and industry standards governing operational resilience.
• Serve as a primary liaison during regulatory examinations, audits, and resilience assessments.
• Develop policies, standards, and governance structures supporting enterprise resilience objectives.
• Provide regular reporting and updates to executive leadership, governance committees, and Board stakeholders.
• Establish and oversee resilience standards for critical third-party service providers and vendors.
• Evaluate third-party resilience capabilities and recovery preparedness.
• Develop contingency plans and alternative operating strategies to mitigate vendor‑related disruptions.
• Partner with procurement, risk, and compliance teams to embed resilience requirements into vendor management processes.
• Partner with cybersecurity, operational risk, and business leaders to identify emerging threats and vulnerabilities.
• Monitor operational risk indicators and resilience metrics across the enterprise.
• Drive continuous improvement efforts based on lessons learned from incidents, exercises, audits, and assessments.
• Promote proactive risk identification and mitigation strategies across the organization.
• Lead and develop a high‑performing operational resilience team.
• Foster strong partnerships across technology, operations, risk management, compliance, and business leadership.
• Serve as a trusted advisor to executive leadership regarding resilience strategy, preparedness, and enterprise risk exposure.
• Promote a culture of resilience awareness and accountability throughout the organization.

• 15+ years of experience in Cyber Resilience, Business Continuity, Disaster Recovery, Cyber Resilience, Operational Risk, Crisis Management, etc.
• Significant experience within banking or financial services.
• Demonstrated success leading enterprise-wide resilience programs and transformation initiatives.
• Experience interacting directly with executive leadership, Board members, regulators, and auditors.
• Deep knowledge of Business Continuity Planning (BCP), Disaster Recovery (DR), Crisis Management, and Incident Response methodologies.
• Strong understanding of operational risk management and enterprise resiliency frameworks.
• Proven ability to lead cross‑functional initiatives in complex organizational environments.
• Bachelor's degree in Cybersecurity, Information Technology, Business Administration, Risk Management, or a related field.