Location: Milton Keynes
Salary: £65,000 - £75,000
Hybrid working
Insurance
About the Role:
We are seeking an experienced Technology Risk & Operational Resilience Manager to join a growing risk function within a leading insurance organisation.
This role is focused on providing second-line oversight, challenge, and guidance across technology, cyber, information security, data protection, and operational resilience risks. You will play a key role in supporting the continued development and maturity of the organisations Operational Resilience framework, ensuring regulatory expectations are met while enabling business transformation and innovation.
The successful candidate will be a trusted advisor to senior stakeholders, helping embed resilience-focused thinking across the business and supporting the delivery of strategic technology and digital transformation initiatives.
Key Responsibilities
* Provide independent oversight and challenge across Technology, Cyber Security, Information Security, Data Protection, and Operational Resilience risk domains.
* Support the ongoing enhancement and maturity of the Operational Resilience framework in line with regulatory requirements and industry best practice.
* Act as a key contributor to the Operational Resilience uplift programme, helping drive improvements across governance, policies, standards, and processes.
* Develop and maintain Operational Resilience policies, standards, and supporting documentation.
* Provide guidance and education to business stakeholders, helping embed resilience requirements and risk management practices across the organisation.
* Challenge and assess technology, cyber, information security, and data-related risks arising from business change, digital transformation, and operational activities.
* Support Important Business Services mapping, impact tolerance assessments, scenario testing, and resilience assurance activities.
* Review and challenge risk assessments, control frameworks, incidents, and remediation activities across technology and operational resilience disciplines.
* Produce high-quality risk reporting and management information for senior leadership, Executive Committees, and Board-level governance forums.
* Build strong relationships across Technology, Security, Data, Risk, and Operational teams to promote effective risk management and resilience outcomes.
* Support the continuous evolution of risk management frameworks, ensuring alignment with business strategy and regulatory expectations.
Who We Are Looking For
* Minimum 5 years experience within Technology Risk, Operational Risk, Operational Resilience, Cyber Risk, Information Security Risk, or a related governance and risk discipline.
* Strong understanding of Operational Resilience regulatory requirements and industry best practice.
* Experience supporting or leading Operational Resilience programmes, including framework development, policy creation, scenario testing, and resilience assessments.
* Proven experience providing oversight and challenge across technology, cyber, information security, data protection, and data risk environments.
* Experience supporting technology and digital transformation initiatives from a risk and governance perspective.
* Excellent stakeholder management skills with the ability to educate, influence, and challenge senior business leaders.
* Strong analytical, reporting, and communication skills with experience presenting to Executive and Board-level audiences.
* Ability to translate complex technical and regulatory requirements into practical business guidance.
Technical Knowledge & ExperienceExperience across several of the following areas is highly desirable:
* Operational Resilience
* Cyber Risk Management
* Information Security Governance
* Data Risk Management
* Data Protection & Privacy
* Technology Risk & Governance
* IT GRC / Technology GRC
* Third-Party and Supplier Risk
* Technology & Digital Transformation Risk
* Business Continuity & Resilience
* Risk Frameworks and Control Assurance
Desirable Qualifications & Framework Knowledge
* CISM (Certified Information Security Manager)
* ISO 27001
* COBIT
* Risk Management qualifications
* Relevant degree or equivalent professional experience
Industry Experience
* Insurance, Financial Services, Banking, or other highly regulated environments preferred.
* Experience operating within FCA, PRA, or similar regulatory frameworks would be advantageous.
This is an excellent opportunity for a technology-focused risk professional who enjoys operating at the intersection of resilience, cyber security, information security, and business transformation, while helping shape the future resilience capability of a growing organisation