> Markdown version of [/jobs/ext/1119821-head-of-business-continuity-cyber-resilience](https://www.wearedevelopers.com/jobs/ext/1119821-head-of-business-continuity-cyber-resilience). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Business Continuity & Cyber Resilience - **Company:** Ofgem - **Location:** Cardiff, UK - **Experience:** Expert - **Salary:** £63,443.0 - £86,547.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Security Management - **Published:** July 2, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=57bd4ef5b7c295a4 ## About the Role * Experience delivering business continuity, resilience, or cyber incident management. (Lead Criteria) * Experience in influencing senior stakeholders and leading organisational planning. (Lead Criteria) * Experience in Cyber Security and Risk Management (resilience focus) * Experience exercising at bronze, silver and gold commands * CISM and AMBCI/MBCI/DBCI. Desirable Criteria * Experience working in regulated or government environments. * Experience delivering organisational training and awareness programmes., * Changing and Improving * Communicating and Influencing * Leadership Technical skills We'll assess you against these technical skills during the selection process: * You will be asked to conduct a presentation during your interview. Details of the presentation will be included in the invitation to interview., This vacancy is using Success Profiles , and will assess your Behaviours, Experience and Technical skills. ## Description You will be responsible for: * Champion business continuity across government security and wider government. * Drive continuous improvement by sharing knowledge, best practices, and lessons learned. * Lead a team of business continuity and cyber resilience specialists to deliver the requirements of CAF, DSHC, ISO22301 and 27031 standards * Lead business continuity and major/minor cyber exercise programmes by engaging stakeholders. * Promote and ensure delivery of training and awareness campaigns to ensure the successful embedding of continuity practices. * Lead on the delivery of incident management policies, investigation procedures, and processes. * Lead the analysis of the source, nature and impact of breaches to support threat intelligence * Monitor security processes, ensuring they are effective and meet current business needs * Contributing to incident management policies, and investigation procedures and processes This is an opportunity to play a significant role in Ofgem’s journey, as part of a newly formed and high-performing team that is shaping a critical government organisation at a time when its work has never been more important., At Ofgem, we expect our staff to carry out their roles with honesty, fairness and openness. They should follow the Civil Service code and be free from any influence or bias. We are committed to making sure interests are recognised, declared and managed appropriately so that we can fulfil our duties as an energy regulator. Our Conflicts of Interest policy outlines the types of interests Ofgem staff must declare before onboarding, and the rules they must follow throughout employment so that we can clearly demonstrate that our decisions are not influenced by private interests. Feedback will only be provided if you attend an interview or assessment. Security Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting . See our vetting charter . People working with government assets must complete baseline personnel security standard (opens in new window) checks., * UK nationals * nationals of the Republic of Ireland * nationals of Commonwealth countries who have the right to work in the UK * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS) * individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020 * Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes](https://www.wearedevelopers.com/videos/498-don-t-be-a-naive-developer-how-to-avoid-basic-cybersecurity-mistakes) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How to Write a CV and Interview if You Don't Fully Qualify For The Job](https://www.wearedevelopers.com/magazine/183-how-to-write-a-cv-and-interview-if-you-don-t-fully-qualify-for-the-job) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)