Operational Resilience Lead

Aufgaben

Die Stelle des Operational Resilience Lead umfasst folgende Aufgaben:

• Serve als local Operational Resilience Responsible per JBG Global Operational Resilience Policy (BORC), integrating key functions including Business Continuity Management (BCM), Information Technology (IT), Information Security (IS), Third-Party Risk Management (TPRM) and Data Management.
• Ensure effective implementation of global policies and procedures at the local level, adapting them where necessary to comply with local regulatory requirements.
• In coordination with the local Head of IT and BCM support and develop the identification, validation and documentation of local Critical Functions (CFs) and their associated Disruption Tolerances (DTs), in coordination with local CF owners and Group.
• Annually review and update CFs and DTs, submitting findings and recommendations to the Group for consideration and approval.
• Develop and manage a multi-year integrated testing plan for local CFs, aligned with the Group's Operational Resilience Testing Standards.
• Plan, coordinate and execute end-to-end resilience testing, including business recovery and crisis management exercises.
• Prepare annual testing reports, documenting identified weaknesses, root causes and remediation plans.
• Track, validate and report on the progress of remediation measures for identified vulnerabilities.
• Escalate critical gaps requiring investment or cross-functional resolution to the Local BRICC Committee and Group bodies.
• Promote a culture of proactive risk identification and continuous enhancement of recovery capabilities.
• Provide sector resilience metrics to the local Operational Resilience Committee (ORC) and Operational Risk Committee.
• Collaborate with business units to deliver changes to business processes or to implement new critical processes.
• Ensure personnel with defined roles in recovery plans are fully trained and capable of executing their responsibilities during disruptions.
• Work closely with Information Technology Security Critical (ITSCM), IS, TPRM, Corporate Communication and business unit leaders to embed resilience across all critical domains.
• Coordinate with Zurich Head Office to leverage centralized tools, methodologies and support while maintaining local accountability.
• Act as the Branch subject matter expert for third-party risk management and outsourcing arrangements.
• Coordinate quarterly outsourcing and third-party risk reporting, ensuring completeness, accuracy, and timeliness.
• Chair the local Third Party / Outsourcing Sub-Committee, driving effective oversight and challenge.
• Oversee and optimise the use of ServiceNow to support third-party processes and reporting.
• Provide clear and concise reporting to senior governance forums, including the Branch Management Board.
• Act as the local point of coordination for cyber security matters, working closely with Group Information Security functions.
• Stay up to date with emerging cyber threats, risks, and regulatory expectations, ensuring local awareness and appropriate response.
• Facilitate and coordinate local cyber exercises, simulations, and awareness initiatives.
• Engage key stakeholders across the business to strengthen cyber resilience and promote a strong security culture.
• Support the implementation and ongoing maintenance of Information Security controls and practices within the Branch.
• Partner with Legal and Compliance to support local data protection obligations and regulatory requirements.

Anforderungen

Für diese Stelle werden folgende Anforderungen gestellt:

• Easy to work with, builds good relationships and works with others to get things done.
• Strong understanding of operational resilience, outsourcing and risk frameworks, within a banking or regulated environment.
• A minimum of 3 years relevant experience is required.
• Experience in managing third-party risk and outsourcing arrangements, including governance, oversight and reporting.
• Solid knowledge of business continuity and crisis management practices, including scenario testing and planning.
• Good understanding of cyber and information security principles, with the ability to engage effectively with Group functions and local stakeholders.
• Contributable working with systems and management information, including tools such as ServiceNow, to support reporting and oversight.
• Confident in chairing committees and governance forums, able to guide discussion, provide appropriate challenges and ensure clear outcomes and accountability.

Wir bieten

Leider sind keine Informationen über das Angebot vorhanden.