Head of Enterprise Resilience - Information Security & Risk

I am working with a leading Insurance client who are seeking an experienced Head of Enterprise Resilience to lead and mature its resilience strategy across operational continuity, cyber risk, information security, supplier oversight, and crisis management.

This is a senior leadership opportunity for an individual who can balance strategic vision with practical execution, ensuring the organisation can anticipate, withstand, respond to, and recover from operational disruptions that face organisations in a complex risk environment.

You will form key relationships with executive stakeholders, driving resilience initiatives across the business, ensuring strong governance frameworks, and overall embedding a proactive risk culture.

Enterprise Resilience & Business Continuity

• Develop and enhance the enterprise resilience framework across the organisation.
• Lead business continuity, crisis management, and recovery planning activities.
• Conduct resilience assessments, scenario testing, and simulation exercises.
• Identify operational vulnerabilities and drive mitigation strategies.
• Establish meaningful resilience metrics, reporting, and governance processes.

Information Security & Risk

• Provide leadership across cyber risk and information security programmes.
• Oversee security governance, policies, and risk management frameworks.
• Support the assessment and management of emerging cyber threats.
• Drive security awareness initiatives across the wider business.
• Ensure effective oversight of security incidents, control environments, and regulatory obligations.

Third-Party & Supplier Risk

• Develop a robust supplier governance and outsourcing framework.
• Ensure appropriate due diligence and ongoing oversight of critical suppliers.
• Monitor supplier performance, risk exposure, and service quality.
• Strengthen third-party risk management practices across the organisation.

Leadership

Lead, mentor, and develop a specialist resilience and risk team.

• Build strong relationships with senior business leaders and key stakeholders.
• Present insights, recommendations, and risk reporting at executive and board level.
• Champion a culture where resilience, security, and risk management are Embedded into business decision-making.

• Significant experience leading enterprise resilience, operational resilience, cyber risk, or information security functions.
• A strong understanding of governance, risk management, and regulatory environments.
• Experience operating within a complex, highly regulated organisation.
• A proven track record of influencing senior executives and board-level stakeholders.
• Strong leadership skills with the ability to develop high-performing teams.
• stakeholder management, and strategic planning capabilities.
• Experience within financial services - ideally Insurance.
• Certifications - CISM, CISSP, CRISC, CBCI, MBCI, or equivalent.

If you have the relevant skills and knowledge and keen to understand more, please forward your profile for an immediate review.