Cyber Response Governance Lead - Operational Resilience/Incident Response

The Opportunity

We are seeking an experienced Cyber Response Governance Lead to support a leading financial services organisation in London.

This role will focus on establishing and enhancing cyber incident response governance, operational resilience and technology recovery capabilities across a complex enterprise environment.

The successful candidate will bridge the gap between cyber security, technology resilience, business risk and executive leadership, ensuring the organisation can respond effectively to major cyber incidents and technology disruptions.

Key Responsibilities

• Design and implement cyber response governance frameworks, escalation procedures, decision rights and incident response operating models.

• Strengthen cyber and technology operational resilience, aligning business recovery requirements with technical capabilities.

• Review Business Impact Assessments (BIA), critical business services and technology dependency mapping.

• Establish governance for major cyber incidents, crisis management, containment, recovery and emergency response.

• Develop cyber incident response playbooks, pre-authorised response actions and escalation pathways.

• Work with Security Operations, Technology, Architecture, Risk and business stakeholders to identify resilience gaps and drive remediation.

• Define governance and human oversight for AI-enabled and automated cyber response.

• Lead cyber resilience scenario testing, crisis exercises, lessons learned and continuous improvement.

• Produce executive-level reporting on cyber resilience readiness, incident response performance and remediation progress.

Essential Skills & Experience

• Significant experience in Cyber Incident Response, Cyber Governance, Technology Resilience, Operational Resilience or Cyber Crisis Management.

• Proven experience developing cyber governance frameworks, incident response procedures, escalation models and playbooks.

• Strong knowledge of Business Impact Analysis (BIA), critical business services, technology dependencies and recovery planning.

• Experience coordinating major cyber or technology incidents across technical, business and senior management stakeholders.

• Strong understanding of incident command, containment, recovery and crisis management.

• Ability to assess technical recovery capabilities against business resilience requirements.

• Experience working with Security Operations Centres (SOC), Technology Risk, Security Architecture and enterprise technology teams.

• Excellent stakeholder management skills, including engagement with senior executives and risk committees.

• Understanding of cyber security and operational resilience regulatory requirements.

Desirable Experience

• Financial services, banking, asset management or other highly regulated environments.

• Knowledge of DORA, NIST CSF, ISO 27001, MITRE ATT&CK and UK operational resilience regulations.

• Experience with ransomware response, cyber crisis simulations, threat intelligence or security operations.

• Understanding of AI-enabled cyber threats, security automation, orchestration and human-in-the-loop controls.

• Relevant certifications such as CISSP, CISM, CRISC, CISA, GIAC or CBCI.

The Ideal Candidate

You will be a senior cyber governance and resilience professional who combines strong incident response knowledge with the ability to design practical governance frameworks.

You must be comfortable engaging technical teams and senior business stakeholders, challenging existing recovery arrangements and translating complex cyber risks into clear business decisions.

This is a governance, cyber response and operational resilience leadership role rather than a hands-on SOC analyst position.

Location: London - Hybrid (3 days onsite per week)

Contract: 6 months initially

Start: ASAP

IR35: Inside IR35