Operational Resilience Lead

The Cyber, Technology & Resilience Oversight team operates as part of the second line of defence, providing comprehensive oversight across Schroders. This team develops and maintains the tools and frameworks necessary for overseeing cyber, technology, and resilience risks. It collaborates closely with Global Technology, Information Security, and first-line business units to ensure such risks are clearly defined, assessed, managed, and reported.

Key responsibilities include:

• Overseeing cyber risks via the Information Security Risk Oversight Committee and through review of KRIs and KCIs.
• Collaborating with information security teams to ensure effective articulation, assessment, and management of cyber risks.
• Providing oversight of technology risk through risk control assessments and engagement in strategic technology initiatives.
• Monitoring cyber and technology-related risk events to ensure thorough root cause analysis and appropriate remediation.
• Programme management of the annual operational resilience self-assessment cycle, ensuring all in-scope entities self-assessments are board-approved.
• Programme management of the annual Business Continuity programme.
• Undertaking due diligence on critical third-party continuity and resilience capabilities.
• Maintaining and regularly testing crisis and incident management frameworks.
• Responding to client due diligence requests regarding Business Continuity and Operational Resilience.

Role Overview

This position is responsible for advancing the operational resilience strategy and strengthening Business Continuity and Crisis Management processes.

Primary responsibilities include:

• Leading ongoing improvements to Business Continuity plans by leveraging industry best practice and collaboration with continuity coordinators and plan owners.
• Enhancing Incident Management Team (IMT) effectiveness through documentation review, facilitation of exercises, simulations, and workshops.
• Evaluating and recommending enhancements to crisis communication strategies and implementing approved changes.
• Reviewing exit strategies for significant outsourcing arrangements under both normal and stressed conditions to ensure aligned to best practice.
• Maintaining up to date knowledge of global resilience regulations, including FCA/PRA Operational Resilience, DORA, MAS BCM, and FINMA.
• Providing credible oversight, support, and challenge to the business concerning operational resilience in alignment with relevant regulatory frameworks.
• Demonstrating strong understanding of cyber risks and what are effective response and recovery strategies for cyber incidents.
• Applying insights from experience within leading financial services firms to drive enhancements.  
• Drafting board-level reports for senior leadership and governing bodies.
• Presenting confidently at Governance Committee meetings, when required.

Essential Skills

• Degree-level education.
• At least 10 years of relevant experience, including in Operational Resilience and in two or more of the following areas: Business Continuity, Operational Risk, Cyber Risk and/or  Crisis Management
• Financial Services experience, preferably in Asset or Wealth Management.
• Proactive approach with strong written communication skills and attention to detail; ability to produce clear, accurate reports tailored to the audience.
• Strong analytical, logical, and problem-solving abilities.
• Effective interpersonal and influencing skills with a collaborative, team-oriented mindset.

Desirable Skills

• Relevant technical qualifications in Business Continuity, Crisis Management, or Information Security.
• Working knowledge of Asset or Wealth Management.
• Consulting or Big Four experience.
• Experience in Investment Banking or Retail Banking within an Operational Resilience or Risk capacity.