Operational Resilience Lead

Tasks

The Operational Resilience Lead for the Guernsey branch is a key leadership role responsible for ensuring that the branch meets both global and local operational resilience requirements. Responsibilities include:

• Overseeing the design, implementation, and ongoing management of business resilience measures tailored to the Guernsey branch
• Representing local operational resilience on the Business Risk and Conduct Committee (BRCC)
• Monitoring the implementation of global policies and procedures at the local level

Governance & Oversight

Responsibilities in this area include:

• Representing Local Operational Resilience in the BRCC
• Integration of key functions such as Business Continuity Management (BCM), Information Technology (IT), Information Security (IS), Third-Party Risk Management (TPRM), and Data Management
• Ensuring the effective implementation of global policies and procedures at the local level

Critical Function Management

Responsibilities in this area include:

• Identification, validation, and documentation of local critical functions (CFs) and their associated disruption tolerances (DTs)
• Annual Review and Update of CFs and DTs

Testing & Lifecycle Execution

Responsibilities in this area include:

• Development and management of a multi-year integrated test plan for local CFs
• Planning, coordination, and execution of end-to-end resilience tests
• Preparation of internal test reports

Remediation & Continuous Improvement

Responsibilities in this area include:

• Tracking, validating, and reporting on the progress of corrective actions for identified vulnerabilities
• Escalation of critical gaps that require investment or cross-functional solutions
• Promoting a culture of proactive risk identification and continuous improvement of recovery capabilities

Reporting & Transparency

Responsibilities in this area include:

• Provision of sector resilience metrics to the local Operational Resilience Committee (ORC) and Operational Risk Committee

Cross-Functional Collaboration

Responsibilities in this area include:

• Collaborate with Information Technology Security Critical (ITSCM), IS, TPRM, Corporate Communications, and business units to embed resilience in all critical areas
• Coordination with the Zurich headquarters to leverage central tools, methods, and support while maintaining local accountability

Third-Party Risk Management & Outsourcing

Responsibilities in this area include:

• Representing the branch as an expert in third-party risk management and outsourcing agreements
• Coordination of quarterly reports on outsourcing and third-party risks
• Chair of the Local Third-Party/Outsourcing Subcommittee

Cybersecurity

Responsibilities in this area include:

• Representative of the Local Cybersecurity Coordination Office
• Staying Up to Date