Cyber & Resilience - Consulting - Enterprise Resilience Senior Consultant

EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities. At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY is a global leader in Consulting, Assurance, Tax, and Transaction services. We make a difference by helping our people, our clients and our wider communities achieve their potential. Our vision is to become the leading global professional services organisation by building a better working world. That starts with our people, and fostering a culture that believes in giving you the training, opportunities, and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime.

The opportunity

The team you join - EY's UKFS Cyber & Resilience Practice is part of a global team of over 5,000 professionals focused on developing and delivering cutting edge security and resilience transformation programmes. We are part of a wider consulting organisation that collectively comprises a $4B global consulting practice with 18,000 professionals. We have large scale plans to expand our already market leading Cyber & Resilience practice and anticipate continued growth throughout the next five years. We need excellent people to join us and be part of our exciting growth strategy.

The ability to remain resilient in the face of a range of disruptions is one of the most critical challenges facing businesses today. Rising client expectations, third-party dependencies, and technological advancements paired with the severe consequences of disruption on firms' reputations, revenue and client trust has led resilience to strengthen its place in the global regulatory landscape andmade obvious the need for organisations to protect their assets, minimise business disruption and improve their resilience.

The role

The role is primarily focused on the development, delivery and assurance of operational and digital resilience programmes and related disciplines. This means helping clients understand and navigate new UK and international resilience-related regulations (e.g., UK FCA/PRA Operational Resilience, Digital Operational Resilience Act). You will support the delivery of resilience programmes, as well as some of the more foundational resilience disciplines such as business continuity, crisis management and testing.

Your role will require you to lead teams or parts of teams on engagements of different sizes under the guidance of senior team members. They will look to you to anticipate and identify delivery risks and raise any issues as appropriate. As an influential member of the team, you will help to create a positive learning culture and will coach and counsel junior team members to assist in their professional development. You will lead by example and act as a role model for our people in the way that you live our values.

Your key responsibilities

You will be working across a portfolio of engagements with our financial services clients, reporting to a Manager or Senior Manager. Your responsibilities will include:

• Supporting our clients in developing and enhancing their resilience frameworks and capabilities.
• Helping clients understand the regulatory requirements they are faced with.
• Conducting resilience assessments, gap analyses, impact tolerance assessments and tests across a range of severe but plausible scenarios to determine single points of failure and develop measures and roadmaps to remediate them.
• Facilitating simulation exercises and providing training to client teams.
• Collaborating with cross-functional teams to ensure a holistic approach to resilience.
• Evaluating and creating measures and controls to implement the regulatory requirements in diverse client environments.
• Keeping abreast of regulatory changes, events, and industry best practices in resilience.
• Contributing to thought leadership and business development activities.
• Assisting in overseeing project metrics by organising staffing, tracking budget, and proactively communicating risks, issues, and dependencies to project leaders.

• Resilience regulatory requirements around business services/critical functions, mapping testing and managing vulnerabilities.
• Business continuity management and impact assessments.
• Design and implementation of governance frameworks, processes, and controls.
• Incident and crisis management policies, procedures, and practice.
• Information security and non-financial operational risk requirements and frameworks.
• OCIR/RRP.
• Security policies and procedures, standards, and controls in line with regulation and/or current standards (e.g. ISO27001).
• Data privacy, implementation of data protection/GDPR programmes to address confidentiality and security.

• Strong academic record including a relevant undergraduate (Bachelors) degree.
• 2-3 years' experience in a relevant industry (desirable: 12+ months experience in resilience, continuity or cyber).
• A passion for collaborating with a team and clients to solve complex problems.

• Experience in Financial Services, Consulting, Government Organisations or Military.
• Experience in resilience, business continuity, IT service continuity, crisis management, risk management, IT audit, incident management and response, third-party risk management and/or other related areas.
• Resilience/continuity related qualifications such as CBCI/AMBCI/MBCI, Master BCM, ISO22301 auditor, ISO 27001 auditor.
• Project and programme related qualifications; Prince II, Scrum, Agile.
• Information security and/or risk related qualifications such as CRISC, CISSP, CISA or equivalents.