We're Hiring: Operational Risk Manager Cyber & Resilience Location: Remote, however Travel to Marlow, Bucks 1x a Month is required Department: Risk Hours: Monday - Friday 09:00-17:30
Overall Purpose of the Job:
We’re looking for an Operational Risk Manager specialising in Cyber & Resilience to join our Risk team and provide second line oversight (2LOD) across cyber, technology and operational resilience risks. This is a key assurance role, offering exposure to senior stakeholders and committees, where you’ll combine strong cyber and information security knowledge with practical risk management expertise. You will act as a cyber risk subject‑matter expert within KMC Operational Risk, bridging technical cyber expertise and risk management, and supporting senior management and committees with clear, decision‑focused insight on cyber and resilience risk exposure.
Key Accountabilities:
1. Provide review** and challenge** of first line cyber, resilience and technology risk management activities.
2. Oversee cyber risk coverage within RCSAs, scenario analysis and operational risk assessments.
3. Assess control design and effectiveness across areas including: Cyber and information security Cloud and third party technology services Data protection, availability and resilience
4. Identify emerging and interconnected cyber risks, escalating where risk appetite may be threatened.
5. Provide second line oversight of cyber incidents, near misses and control failures, including root cause analysis and remediation.
6. Track and validate closure of significant cyber risk issues and audit findings.
7. Support the development and monitoring of risk indicators, thresholds and tolerances.
8. Partner closely with Operational Resilience teams to embed cyber risk into: Important Business Services mapping Impact tolerances Severe but plausible cyber scenarios
9. Produce high quality management information and reporting for senior forums, including executive committees and Board level packs.
10. Act as a risk business partner to selected areas, building strong collaborative relationships while maintaining independence.
11. Coach and support first‑line teams in improving cyber risk identification and documentation, while maintaining independence
12. Preparing regular and ad-hoc management information/reporting for various forums including Board and ERMC, reviewing reporting submissions prior to final submission.
Experience, Knowledge, Skills
13. Strong experience in cyber security and operational risk
14. Experience working in a heavily regulated environment
15. Background in Risk, Audit or Compliance, with a solid understanding of risk and control frameworks.
16. Ability to communicate complex technical topics clearly to non technical stakeholders.
17. Confident, organised and detail focused, with the resilience to operate in a changing regulatory and technology landscape.
18. Comfortable working independently while contributing to a close knit team.
19. Strong working knowledge of Microsoft Excel and PowerPoint.
20. Professional certifications such as CISA, CRISC, IRM or equivalent.
21. Experience working with AI would be an advantage
Why join us?
At Kensington Mortgages, we believe our employees are the heart of our success. We are committed to creating a supportive and flexible work environment that values personal growth, professional development and a healthy work life balance Our inclusive culture respects and celebrates diversity in all its forms, ensuring that everyone feels welcome, valued and understood. We recognise and appreciate differences in thinking, learning styles, gender, race, identity, ethnic origins and sexual expression. 29-May-2026 Home