Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Business Resilience Manager role.
Rezi rewrites your resume against Eversheds Sutherland's job description. Free.
Tailor your resume to this Business Resilience Manager role.
Rezi rewrites your resume against Eversheds Sutherland's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Business Resilience Manager posting at Eversheds Sutherland — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Business Resilience Manager posting at Eversheds Sutherland — free, in seconds.
About the Role
We are seeking an experienced and influential Business Resilience manager to lead the continuous improvement of Eversheds Sutherland’s business resilience management capability across its international network. You will ensure that business resilience arrangements remain practical, current and aligned to the firm’s most critical services, client commitments, enterprise risks and Minimum Viable Firm priorities. You will maintain the controlled documentation required for relevant ICO certification and lead the associated audit. You will translate policy, business impact analysis and recovery priorities into a clear improvement programme for plans, runbooks, recovery strategies and supporting information. Working directly with senior leaders, you will challenge assumptions, clarify accountabilities and ensure arrangements reflect changes in services, people, locations, technology, suppliers and the external threat environment. A central feature of the role is close partnership with IT as technology incident response, cyber response and disaster recovery capabilities mature. You will align business and technology recovery assumptions, design a structured operational and executive exercising programme, and convert lessons from exercises and live incidents into measurable improvements and clear management information.
Responsibilities
- Lead and continually improve the firm’s business resilience management programme, standards, governance, lifecycle and delivery roadmap.
- Translate enterprise risk priorities, Minimum Viable Firm requirements, likely crisis triggers and client commitments into a clear, risk-based resilience improvement plan.
- Develop and maintain clear roles, decision rights and escalation arrangements across the Gold, Silver and Bronze incident command structure, promoting effective ownership across practice groups, Business Services teams, international offices and critical support functions.
- Establish and chair a cross-firm Business Resilience governance forum.
- Establish a proportionate review cycle for business impact assessments, business resilience plans, runbooks, contact information and critical business information.
- Engage senior leaders to validate critical activities, recovery priorities, recovery time objectives, resources, dependencies and workable recovery strategies.
- Set concise, action-oriented standards, templates and quality criteria; use findings from analysis, incidents, exercises, audits, client reviews and operating-model changes to identify gaps and prioritise improvements.
- Track improvements to completion, validate that remediation addresses underlying weaknesses and escalate material or overdue actions.
- Maintain controlled, accurate and audit-ready policies, procedures, plans, records and evidence for relevant ICO certification; lead the associated audit and ensure findings are resolved promptly and sustainably.
- Develop a risk-based resilience roadmap aligned to critical services and regulatory expectations.
- Build an effective partnership with IT, IT Risk Management, Information Security and incident response teams.
- Ensure business-defined critical processes, systems, data, alternative technology requirements and recovery priorities inform disaster recovery and incident response planning.
- Align business recovery time objectives with technology recovery assumptions, highlighting unsupported dependencies, conflicts and single points of failure.
- Integrate business resilience, crisis management, cyber response, major incident management and disaster recovery into coherent end-to-end scenarios and escalation paths.
- Support resilient plan repositories, alternative communications, clean-device or virtual-desktop solutions and other recovery capabilities.
- Maintain critical service dependencies across people, processes, technology, data, third parties and locations.
- Align business resilience with IT disaster recovery.
- Design and deliver an annual, risk-based programme covering operational teams, senior leaders, the incident command structure and critical third parties.
- Facilitate plan walkthroughs, communication tests, tabletop exercises, simulations and integrated business and IT recovery exercises using credible scenarios.
- Prepare executive participants while preserving sufficient challenge; lead structured debriefs, agree owners and deadlines, and retest where required.
- Embed an assumed-breach mindset across planning and exercises.
- Develop decision-useful management information on plan coverage, review status, exercise performance, recovery capability, gaps, overdue actions and recurring themes.
- Advise the Head of Risk Management, relevant committees and senior leadership on readiness, material gaps, investment priorities and emerging resilience concerns.
- Support live incidents as required and lead post-incident reviews, translating lessons into changes to plans, technology, controls, training and governance.
- Act as the principal operational contact for resilience planning, exercising, readiness reporting and improvement.
- Build trusted relationships with executive and international leaders, practice group leaders, Business Services chiefs, office leaders and plan owners.
- Collaborate across technology, information security, data governance, legal, compliance, communications, finance, people, procurement, workplace, insurance and operations.
- Build organisational capability through targeted training, briefings, guidance and exercise support, using constructive challenge to secure ownership and sustained action.
- Develop a Board-aligned Business Resilience strategy.
Requirements
- Significant experience leading business-wide change, operational improvement, risk, resilience or other complex cross-functional programmes in a professional services or regulated environment; a business resilience background is desirable but not essential.
- The ability to acquire and apply sound working knowledge of business resilience management, business impact analysis, recovery strategies, plan development, exercising and post-incident review; existing expertise would be advantageous.
- Exceptional relationship-building and facilitation skills, with the confidence to challenge assumptions constructively and secure ownership from senior managers.
- Experience partnering with IT and Information Security teams, with sufficient technical understanding to connect business requirements to incident response and disaster recovery capability.
- Experience designing and facilitating operational and executive exercises, producing clear evaluations and driving remediation through to closure.
- Strong analytical, programme-management, reporting and presentation skills, together with a pragmatic, calm and risk-based approach.
- Experience maintaining controlled certification or assurance documentation and leading or coordinating external audits, reviews or assessments.
- Demonstrate strong personal integrity and professional judgement.
- Be an experienced leader with a relevant professional qualification or equivalent experience in business resilience, operational resilience, risk, technology or complex business change.
- Bring a strong record of delivering cross-functional improvement in a regulated or professional services environment, influencing senior stakeholders and working effectively with IT and Information Security.
- Be strategic yet practical, exercise sound judgement under pressure, communicate clearly and turn plans, exercises, incidents and audit findings into measurable improvements.
Skills
- Business resilience management
- Business impact analysis
- Recovery strategies
- Plan development
- Exercising
- Post-incident review
- Relationship-building
- Facilitation
- Challenging assumptions
- Securing ownership
- Partnering with IT and Information Security
- Technical understanding
- Incident response
- Disaster recovery capability
- Designing and facilitating operational and executive exercises
- Producing clear evaluations
- Driving remediation
- Analytical skills
- Programme-management skills
- Reporting skills
- Presentation skills
- Pragmatic approach
- Calm approach
- Risk-based approach
- Maintaining controlled certification or assurance documentation
- Leading or coordinating external audits, reviews or assessments
- Knowledge of ISO 22301
- Relevant professional accreditation
Location
- International
Work Type
- Remote working
- Flexible working
- Agile working
- Hybrid working
Experience Level
- Experienced manager
- Experienced leader
Education Level
- Relevant professional qualification or equivalent experience
Benefits
- Dental care
- Healthcare
- Wellness support
- Retirement planning
- Insurance
- Assurance
- Structured professional and personal training
- Mentoring programs
- Development programs
- Pro bono work opportunities
- Community engagement opportunities
About the Company
- Eversheds Sutherland is a global law firm with more than 5,000 people across over 30 countries.
- We’re full-service with deep niche and sector experience.
- We live our values, we’re purposeful and purpose-led.
- We see the world as a place where everyone can thrive.
- We’re ambitious for our clients, our communities – and for you.
Equal Opportunity
- Inclusive is a core business value.
- We foster diversity of thought and the freedom to put ideas into action.
- We have an inherent respect for the individual.
- We have a strong belief in collaboration and teamwork.
- We want all our people to thrive at work and reach their full potential and we work hard to continue to build a diverse and inclusive culture, monitor and report on our progress and impact, and develop our approach.
- This is reflected in our policies, systems and processes, and in our work with diversity membership organisations.
- We want you to perform at your best during our recruitment process. If there is any adjustment or support you need, please contact us so we can discuss how we can best assist you.