About the Role
We are seeking an experienced cyber security professional to join us as our new Head of Cyber Resilience and Business Recovery.
This role will support OUP to develop and maintain plans for effectively maintaining business resilience in a world where the threat of cyber attack is always present. Working closely with OUP business divisions, technology teams and business operations continuity colleagues, the postholder will help shape and test cyber security resilience plans. The objective of the role is to ensure that OUP understands it's Cyber Resilience maturity and has a tested and well understood business recovery response.
Reporting to the Director of Cyber Security, Risk and Resilience (CISO), the postholder will be responsible for designing, implementing, and maintaining a comprehensive cyber resilience framework for OUP. This includes leading the Cyber Resilience and Recovery transformation workstream and integrating it into the broader Cyber Security Transformation programme. The role requires close collaboration with various teams—such as Business Operations Continuity, health and safety, legal, data privacy, and technical disaster recovery—to ensure a unified and tested approach to crisis management. The postholder will also support Cyber Security Operations by embedding incident management and reporting into the framework and facilitating red, blue, and purple teaming exercises to identify and implement improvements.
To ensure the framework is effective and widely adopted, the postholder must engage with stakeholders across OUP divisions to build trust and maintain support for cyber incident readiness. They will work closely with the Head of Cyber Security Training and Awareness, communications teams, and other stakeholders to promote understanding and conduct training and exercises. The framework must align with compliance standards and contribute to cyber risk reduction, requiring collaboration with the Head of Governance Risk and Compliance and the Cyber Security & Resilience Test Lead to develop metrics and maturity reporting. Additionally, the postholder will ensure recovery processes are practical and suitable for OUP's multinational and multi-partner technology environment, maintain relevant policies and documentation, and establish a process for continuous evaluation and improvement.
We operate a hybrid working policy that requires a minimum of 2 days per week in the Oxford office.
About You
To be successful in this role, you will ideally have/be:
* Experience in designing and delivering a cyber resilience framework in a large or complex organisation
* A good understanding and knowledge of cyber security management frameworks including NIST 2:0 and ISO 27001.
* Knowledge of cyber security risk management process
* Experience in working across cyber security teams and operational business continuity teams.
* Confident communicator with experience of collaborating across multiple stakeholders
* Ability to produce clear framework documentation and experience in working with other cyber security functional leads.
* Experience of working in a busy transformation environment – with experience of change and culture change (desirable)
Benefits
We care about work/life balance here at OUP. With this in mind we offer 25 days' holiday that rises with service, plus bank holidays and Christmas closure (3-days) and a 35-hour working week. We are open to discussing flexibility in respect to working patterns, dependent on role. We also have a great variety of active employee networks and societies.
We help make your money go further by contributing to your pension up to 12%, offering loans and savings schemes through our partnership with Salary Finance, in addition to travel to work schemes and access to a wide range of local discounts.
This role comes with the added benefit of private medical insurance and a management bonus.
Please see our Rewards and Recognition page for more information.
Please note this advert may be removed before the advertised end date, so we encourage you to apply as soon as possible.
We are committed to supporting diversity in our workforce, and ensuring an inclusive environment where all individuals can thrive. We seek to employ a workforce representative of the markets that we serve and encourage applications from all.