Head / Director Enterprise Operational Resilience & Cyber Risk Strategy

Title: Head / Director Enterprise Operational Resilience & Cyber Risk Strategy

Office Status: Hybrid New York, NY

Base Salary: $200k - $250k + Bonus

ABOUT THE ROLE

This is a senior leadership opportunity within the Operational Resilience function of a well-established global financial institution, offering full ownership of the enterprise-wide strategy to ensure resilience against operational disruptions, cyber threats, and systemic risks. The role carries a broad and high-impact mandate spanning incident management, business continuity and disaster recovery, regulatory governance, third-party resilience, and threat intelligence requiring deep expertise across all pillars of operational resilience in a highly regulated financial environment. With direct engagement with C-suite leadership, regulators, and board members, this is the right seat for a seasoned operational resilience executive with 15+ years of experience who combines strategic vision with hands-on program leadership and the executive presence to champion resilience as a firm-wide priority.

RESPONSIBILITIES

• Develop and implement a comprehensive operational and cyber resiliency strategy aligned with regulatory requirements and industry standards;define KRIs, KPIs, and KCIs to measure program effectiveness
• Collaborate with senior leadership to embed resilience principles into business and technology processes;stay ahead of emerging risks, regulatory changes, and evolving threat landscapes
• Oversee the development and execution of the bank's incident management framework ensuring rapid response and recovery from information security and technology incidents;lead and design tabletop exercises and simulations to test cyber incident response and business recovery capabilities
• Coordinate with internal and external stakeholders including regulators, law enforcement, and third-party service providers during cyber events;ensure integration of cyber resilience into enterprise risk management and IT security functions
• Develop and maintain enterprise-wide business continuity and disaster recovery plans;conduct regular BC/DR testing, audits, and training sessions;work closely with technology teams to ensure RTOs and RPOs are met for critical systems
• Ensure compliance with all relevant regulatory frameworks including FFIEC, OCC, Basel, and DORA;serve as a key liaison with regulatory bodies and auditors;develop governance frameworks, policies, and procedures to enforce resilience mandates across the organization
• Assess and mitigate risks associated with third-party vendors;establish rigorous due diligence processes for critical suppliers including resilience testing and contractually mandated recovery capabilities;develop contingency strategies for vendor-related disruptions
• Develop and oversee an operational risk and threat intelligence program to proactively identify vulnerabilities and emerging threats;partner with cybersecurity, fraud prevention, and risk management teams to integrate threat intelligence into resilience planning
• Lead a cross-functional resiliency team fostering collaboration between IT, risk management, compliance, and business units;provide executive leadership with regular briefings on resilience posture, key risks, and strategic initiatives
• Champion a culture of resilience by driving awareness, training, and engagement across the enterprise;advocate for resilience investments ensuring adequate funding and resource allocation for critical initiatives