.

Support the development and implementation of the policies and procedures for Business Resilience

 

Main duties and responsibilities

 

• Lead the development and embedding of the Business Resilience framework as a trusted partner, integrating resilience, business continuity, technology resilience, crisis management, and third-party resilience.


• Ensure the firm can continue to deliver important legal services within defined impact tolerances, even in severe disruption scenarios.


• Translate complex resilience risks into clear, decision-ready insight for senior leaders and non-technical stakeholders.

• Highlight systemic risks, vulnerabilities, and single points of failure, providing pragmatic recommendations for mitigation and investment.

• Support recovery during major incidents, working within the Major Incident and Crisis Management frameworks.

• Oversee assurance of the resilience of critical third-party suppliers, including outsourced and cloud providers, including supplier DR and resilience testing, including failure scenarios such as supplier insolvency, exit, or concentration risk.


• Ensure resilience considerations are embedded into supplier onboarding, contract renewal, and exit planning.

• Maintain a comprehensive resilience validation programme, covering people, processes, technology, third parties, and decision-making.


• Coordinate scenario-based exercises, documenting objectives, success criteria, lessons learned, and remedial actions, tracking remediation activity to drive measurable improvement in resilience maturity.

• Support the ongoing development and maintenance of the Crisis Management framework, providing SME guidance and support during live incidents and crises, enabling effective coordination and recovery.


• Produce clear, concise management and executive reporting on resilience posture, testing outcomes, risks, and required escalations.


• Support regulatory and audit engagement by providing evidence of a robust, outcome-focused resilience approach.

 

About you

 

• Strong experience in Business / Operational Resilience, Business Continuity, IT Resilience/ Crisis Management or Risk.


• Ability to operate confidently across business, technology, and executive stakeholders.


• Experience designing and delivering scenario-based testing and crisis exercises.


• Pragmatic, outcome-focused mindset with the confidence to challenge constructively.


• Excellent written and verbal communication skills, particularly for senior and non-technical audiences.


• Excellent stakeholder management skills and management of expectations.


• Enthusiastic, self-supporting and confident, with the ability to enthuse others and get their engagement.


• Ability to take ownership of problems and the decision-making process to resolve them.


• Willingness to build up knowledge of the relevant standards

 

The following characteristics are essential

 

• Natural collaborator


• Business focused


• Pro-active approach


• Excellent communication skills


• Genuine passion for resilience


• Desire to develop (both themselves and others)


• Methodical and a natural problem solver


• Initiative and ability to work under time constraints