About the Role
The Global Head of Operational Resilience is a strategic leadership role responsible for safeguarding Ebury’s technology, security, and digital assets. This role ensures effective integration of Operational Resilience into the Risk Management Framework, aligning with DORA/PS21/3, TPRM, and Incident & Crisis Management. You will own the Technology Risk Management Framework and drive a holistic risk strategy to protect critical business functions from disruption. This position is key as Ebury enters a crucial phase of development.
Responsibilities
- Own, manage, and control Technology Risk and Resilience mandates, metrics, and internal processes globally.
- Manage and continuously improve IT Risk Management through oversight of technology, security, and data risks and controls aligned with ISO 27001.
- Oversee enterprise-wide implementation and adherence to DORA and PS21/3, incident and crisis management.
- Ensure all vendor contracts incorporate DORA-mandated provisions, security expectations, and exit strategies.
- Conduct ongoing due diligence and continuous risk assessments of critical or important functions outsourced to third parties.
- Provide independent oversight of the Group Security function, ensuring cybersecurity posture aligns with industry frameworks.
- Challenge, assess, and assure the effectiveness of security controls, review and report incidents.
- Map business processes across all geographies and manage/review over 200 business processes.
- Direct enterprise-wide operational resilience initiatives to ensure the firm can withstand and recover from severe disruptions or cyberattacks.
- Oversee annual digital operational resilience testing programs.
- Chair the Digital and Operational Resilience Committee, IT Risk Management Committee, and Outsourcing and Third Party Risk Management Committee.
- Develop metrics and reporting for the CRO and Board on key technology, security, resilience, and TPRM risks and controls.
- Prepare evidence and lead interactions with regulatory bodies, supervisory authorities, and auditors regarding Technology Risk and Resilience.
Requirements
- At least 10 years of leadership experience in Operational Resilience, Technology Risk, or Technology Audit, ideally within financial services.
- Experience in Risk Management within an Operational Resilience context.
- English language proficiency required.
- Experience of Financial Services and/or Auditing is an advantage.
- Finance, Accounting, Risk Management, or Audit accreditations or certifications are an advantage.
- Problem-solving and quality focus.
- Strong project and programme management skills.
- Drive, adaptability, and delivery focus.
Skills
- Operational Resilience
- Technology Risk
- Technology Audit
- Risk Management
- Information Technology (IT) Risk Management
- ISO 27001
- Digital Operational Resilience Act (DORA)
- PS21/3 (UK)
- Third-Party Risk Management (TPRM)
- Incident & Crisis Management
- Cybersecurity
- Project Management
- Programme Management
Location
- Madrid
- Remote
Work Type
- Hybrid
- Full-time
Experience Level
- Leadership
- 10+ years
Salary/Compensations
- Competitive Starting Salary
- Annual discretionary bonus
Benefits
- Dedicated Mentorship
- Cutting-Edge Technology
- Clear, Accelerated Career Progression
- Dynamic & Supportive Culture
- Generous Benefits Package (including health care and social benefits)
About the Company
- Ebury delivers sophisticated, integrated solutions — business accounts, hedging, and financing — on a single platform with a seamless workflow to help businesses operate and scale globally.
- Founded in 2009, Ebury is a fast-growing leader in fintech with 1,800+ employees across nearly 70 cities.
- The company utilizes a proprietary platform to help businesses seamlessly streamline and manage global cash flow, focusing on continuous product evolution and innovation for borderless growth.
- Opportunities range from business development to engineering roles across tech pillars.
Equal Opportunity
- We believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story.
