We are seeking an experienced Operations Resilience Specialist with a strong background in technology and cyber risk to join our European asset management firm. This role is pivotal in ensuring the continuity and resilience of our critical business services, particularly in the face of cyber threats, IT disruptions, and third-party failures. You will work closely with senior stakeholders across risk, technology, compliance, and investment operations to embed resilience into our operating model and meet evolving regulatory expectations such as DORA, FCA/PRA, and ESMA guidelines.
Key Responsibilities:
Operational Resilience & Regulatory Compliance
- Lead the identification and mapping of Important Business Services (IBS) in line with UK and EU regulatory frameworks (e.g., DORA, FCA/PRA SS1/21, ESMA).
- Develop and maintain impact tolerance thresholds and ensure testing strategies are in place to validate resilience capabilities.
- Support regulatory submissions and audits related to operational resilience and cyber risk.
Technology & Cyber Resilience
- Collaborate with IT, cybersecurity, and third-party risk teams to assess vulnerabilities and ensure robust recovery capabilities for critical systems.
- Contribute to the design and execution of cyber incident response plans, penetration testing, and resilience simulations.
- Monitor emerging cyber threats and assess their potential impact on business continuity.
Business Continuity & Disaster Recovery
- Maintain and enhance business continuity and disaster recovery plans, ensuring alignment with operational resilience objectives.
- Coordinate and lead scenario-based testing exercises, including cyber-attack simulations and third-party outages.
Risk Monitoring & Reporting
- Develop and maintain dashboards and KPIs to track resilience posture and report to senior management and risk committees.
- Conduct post-incident reviews and lessons-learned exercises to drive continuous improvement.
Stakeholder Engagement & Training
- Act as a subject matter expert on operational resilience, providing guidance and training across the business.
- Foster a culture of resilience through awareness campaigns and cross-functional collaboration.
Qualifications & Experience:
- Experience in operational resilience, cyber risk, or IT risk management within financial services, ideally asset management.
- Strong knowledge of European and UK regulatory frameworks (e.g., DORA, FCA/PRA, ESMA, ISO 22301).
- Familiarity with asset management operations, including front-to-back trade lifecycle and third-party service dependencies.
- Experience with GRC tools, resilience testing platforms, and incident management systems.
Preferred Certifications:
- Certified Information Systems Security Professional (CISSP)
- Certified Business Continuity Professional (CBCP)
- ISO 22301 Lead Implementer or Auditor
- Certified Information Security Manager (CISM)
- Operational Resilience Practitioner Certification (ORPC) – optional but advantageous
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.
