Head of Enterprise Resilience - Information Security & Risk

Head of Enterprise Resilience
- Information Security & Risk

Head of Enterprise Resilience
- Security & Risk
- Hybrid
- London
- Permanent

Leading Enterprise-Wide Resilience, Security & Third-Party Risk

I am working with a leading Insurance client who are seeking an experienced Head of Enterprise Resilience to lead & mature its resilience strategy across operational continuity, cyber risk, information security, supplier oversight, & crisis management.

This is a senior leadership opportunity for an individual who can balance strategic vision with practical execution, ensuring the organisation can anticipate, withstand, respond to, & recover from operational disruptions that face organisations in a complex risk environment.

You will form key relationships with executive stakeholders, driving resilience initiatives across the business, ensuring strong governance frameworks, & overall embedding a proactive risk culture.

Enterprise Resilience & Business Continuity

• Develop & enhance the enterprise resilience framework across the organisation.
• Lead business continuity, crisis management, & recovery planning activities.
• Identify operational vulnerabilities & drive mitigation strategies.
• Establish meaningful resilience metrics, reporting, & governance processes.

Information Security & Risk

• Provide leadership across cyber risk & information security programmes.
• Oversee security governance, policies, & risk management frameworks.
• Support the assessment & management of emerging cyber threats.
• Drive security awareness initiatives across the wider business.
• Ensure effective oversight of security incidents, control environments, & regulatory obligations.

Third-Party & Supplier Risk

• Develop a robust supplier governance & outsourcing framework.
• Ensure appropriate due diligence & ongoing oversight of critical suppliers.
• Strengthen third-party risk management practices across the organisation.

Leadership

Lead, mentor, & develop a specialist resilience & risk team.

• Build strong relationships with senior business leaders & key stakeholders.
• Champion a culture where resilience, security, & risk management are embedded into business decision-making.

Experience:

• Significant experience leading enterprise resilience, operational resilience, cyber risk, or information security functions.
• A strong understanding of governance, risk management, & regulatory environments.
• Experience operating within a complex, highly regulated organisation.
• A proven track record of influencing senior executives & board-level stakeholders.
• Strong leadership skills with the ability to develop high-performing teams.
• stakeholder management, & strategic planning capabilities.
• Experience with in financial services - ideally Insurance.
• Certifications - CISM, CISSP, CRISC, CBCI, MBCI, or equivalent.

Data & Application Notice

We process personal data submitted as part of your application for recruitment purposes in line with UK GDPR. All applications are reviewed by a member of our team, we do not use automated decision-making in our selection process.
Your application will be assessed against the requirements of this role.

By applying to this advert, you consent to receiving future relevant roles & industry news & insights from us. To opt out of this, please contact:  .