Lead Business Resilience Specialist

**Details**:
**Reference number**:

- 346723**Salary**:

- £58,520 - £86,547- London £62,700-£86,547 National £58,520-£80,425. Please ensure that you read the Pay and Reward information for civil service and internal colleagues before applying- A Civil Service Pension with an average employer contribution of 27%**Job grade**:

- Grade 6- Level 3**Contract type**:

- Permanent**Business area**:

- OFGEM - Corporate Services**Type of role**:

- Environment and Sustainability
- Knowledge and Information Management
- Security**Working pattern**:

- Full-time**Number of jobs available**:

- 1Contents

Location

About the job

**Benefits**:
Things you need to know

Location
- Cardiff, Glasgow, LondonAbout the job

**Job summary**:
Put resilience at the heart of our organisation as you contribute to our ground-breaking work

As the UK’s regulator for the energy industry, Ofgem works on behalf of energy consumers to ensure that every household and business in the UK can rely on a safe, affordable and environmentally sustainable energy supply. That includes protecting the resilience of the UK national infrastructure. We also work hard to improve Ofgem’s own business security, privacy and resilience, and are currently expanding our in-house cyber capability.

In this role of Lead Business Resilience Specialist, you will provide assurance that Ofgem has adequate measures in place to respond effectively to adverse events and crisis scenarios. Your immediate focus will be cyber, but the strategies and approaches you develop will extend to the protection of people and processes. With the scope to set new priorities and working practices, and to shape your role and the team around you, there’s potential to make a massive impact. Expect to engage at senior levels across Ofgem and within the wider public sector. You will also benefit from the support of our in-house cyber security profession.

**Job description**:
The Lead Business Resilience Specialist’s key responsibility is to provide assurance that Ofgem has adequate Business Resilience in place and can respond effectively to adverse events and/or crisis scenarios. The immediate focus is on Cyber, but strategies and approaches that are developed should recognise and facilitate potential expansion to other areas such as physical/buildings/people/personnel/processes, in due course.

**Definition and delivery of a rolling programme of work encompassing**:

- Ownership, review and refresh of Resilience Policies and Processes;
- A wholesale review of Ofgem Resilience Governance and capability;
- Pro-active engagement with pipeline and legacy infrastructure and processes to ensure appropriate consideration and oversight of resilience;
- Production of an overarching and holistic view of:

- Ofgem critical systems and IT infrastructure;
- Relative Business criticality and recovery priorities;
- Recovery Point Objectives (RPO), Recovery Time Objectives (RTO), and/or other agreed DR requirements.

**Provision of Subject Matter Expertise support, including**:

- Engagement with line of business local BC leads;
- Review and Assurance of business BC plans;
- Representation of Ofgem where required to wider HMG areas, including any cross-HMG response, and where required COBR;
- Promoting and developing resilience approaches, strategies, and development as part of the wider Cyber profession, and as a key Team Leader.

The role will also act as a key enabler for Ofgem Gold and Silver command in major continuity and /or crisis scenarios.

**Key Outputs and Deliverables**
- Driving positive and pro-active engagement with key stakeholders to gather insight into Business needs, obligations, system interfaces and dependencies, and ensure that is translated into agreed, meaningful, realistic, and risk-based recovery objectives;
- Develop a full view of Ofgem critical systems and infrastructure with agreed Relative Priority, RPO and RTO, and other key measures associated with the selected Polices and standards (e.g., Maximum RTO, Maximum Tolerable Period of Disruption (MPTD), etc);
- Assessment of compliance with agreed DR requirements, identification of improvement activities, and driving improvement delivery;
- Definition and delivery of a rolling Assurance programme;
- Provision of recommendations to lines of business for tangible improvement to resilience and reduction of Risk;
- Regular dashboard reporting at both micro and macro levels, that clearly shows areas of good practice, areas for improvement, and related Risk;
- Development of collateral, tracking and reporting mechanisms in line with organisational change and implementation of professions models;
- Promoting and supporting activities for Corporate good, spanning professionalism, inclusion, development and civil service leadership values and behaviours.

**Person specification**:

- **Strong expertise in Resilience and Business Continuity professions and good practice, supported with an appropriate qualification/ce