Operational Resilience Manager

LHV Bank Limited is a UK-licensed bank operating across three core business segments: Retail Banking, SME Lending, and Banking Services (BaaS). The bank is a wholly owned subsidiary of LHV Group, a listed financial services provider headquartered in Estonia. LHV Bank operates under a full UK banking licence granted in May 2023.

The Bank supports over 200 fintech clients with embedded financial infrastructure, provides retail savings products via digital channels, and offers SME credit solutions across the UK. In line with its regulatory responsibilities and growth ambitions, LHV Bank is committed to maintaining a robust and proportionate financial crime control environment.

Expanding our services, LHV Bank now provides personal banking solutions. Our offerings include current accounts with competitive interest rates, fixed-rate bonds for long-term savings, and debit cards.  Customers can conveniently access these services through the LHV App, enabling secure account opening and management.

About the Role:

We are seeking an experienced Operational Resilience Manager to support the continued development, operation and maturity of the Bank’s operational resilience framework.  

This role will ensure that operational resilience is embedded across the Bank through clear governance, service ownership, important business service mapping, impact tolerance management, scenario testing, remediation tracking and the continuous management of operational resilience risks across critical business processes .  

The successful candidate will report to the Head of Technology and work closely with Information Security, Vendor Management, Product Management, Engineering, Risk and Compliance.  

Key Responsibilities:  

• Maintain and enhance the Bank’s operational resilience framework, ensuring it remains practical, proportionate and aligned to regulatory expectations.  

• Build strong relationships across the Bank to coordinate operational resilience activities, influence stakeholders and drive timely delivery of resilience outcomes across multiple business and technology teams.  

• Coordinate the ongoing management of operational resilience across the Bank's critical business processes, ensuring resilience insights from operational risk and activities (e.g. incidents, change, third-party risk and scenario testing) are translated into practical resilience improvements.  

• Provide operational resilience oversight of critical third-party and intra-group dependencies, working with Vendor Management and service owners to assess resilience, contractual protections, testing evidence and remediation requirements.  

• Coordinate the identification, review and governance of important business services, impact tolerances, service maps, dependencies and vulnerabilities.  

• Support business service owners in understanding their resilience responsibilities and maintaining appropriate evidence for their services.  

• Own the operational resilience scenario testing programme, including the design, planning, facilitation and evaluation of severe-but-plausible exercises linked to the Bank’s important business services and impact tolerances.  

• Track operational resilience vulnerabilities, lessons learned and remediation actions through to closure, ensuring insights from incidents, operational risk activities and resilience testing are appropriately reflected in resilience improvements, and escalating overdue or material issues where required.  

• Coordinate the Bank’s contribution to Group digital operational resilience requirements and support the alignment of UK operational resilience activities with relevant Group DORA obligations.  

• Produce high-quality operational resilience reporting, management information and self-assessment material for senior management, Executive Committees and Board-level governance forums.  

• Support internal audit, regulatory engagement and assurance activity relating to operational resilience, ICT resilience and third-party dependencies.  

Who We Are Looking For:  

• Extensive experience in operational resilience, technology risk, operational risk, business continuity, resilience assurance, or a related risk and governance discipline within banking or regulated financial services.  

• Strong practical knowledge of the UK FCA/PRA operational resilience regime, including Important Business Services, impact tolerances, service mapping, scenario testing, vulnerability management and self-assessment.  

• Practical experience developing, maintaining or operating operational resilience frameworks and governance, with the ability to translate regulatory expectations into proportionate processes, guidance and evidence requirements.  

• Strong experience designing, facilitating and evaluating severe-but-plausible resilience scenarios, including tabletop and cross-business exercises, and driving lessons learned, remediation and retesting through to completion.  

• Good understanding of the interfaces between operational resilience and technology/ICT resilience, third-party and supplier resilience, business continuity, incident management and operational risk, with experience working across these disciplines in practice.  

• Working knowledge of DORA and digital operational resilience requirements, particularly in relation to ICT risk, resilience testing, ICT third-party dependencies and incident management.  

• Experience identifying and assessing dependencies and vulnerabilities across business services, technology, third parties and intra-group arrangements, and translating these into practical resilience improvements.  

• Strong analytical, reporting and written communication skills, including experience producing risk and resilience reporting, maintaining control evidence, tracking vulnerabilities and remediation actions through to closure, and preparing materials for Executive and Board-level audiences.  

• Excellent stakeholder management and influencing skills, with the ability to build credibility, gain buy-in and coordinate delivery across business, technology, risk and third-party management functions without direct authority.  

Desirable Qualifications and Framework Knowledge:  

• CBCI, MBCI, CRISC, CISM, ISO 22301, ISO 27001, COBIT or equivalent practical experience.  

• Experience supporting internal audit, regulatory reviews or operational resilience assurance activity.  

• Experience operating within FCA, PRA, DORA or similar regulatory frameworks.  

Some of our benefits (only applicable to UK based roles not Internship programmes) 

• Competitive salary &lots of opportunities to learn, grow and progress professionally.
• Open and inclusive culture.   
• Hybrid working.
• Fantastic offices and great working environment.
• Vitality Health Plan (includes private health insurance, travel insurance, gym discounts)  
• Health cash Plan (Medicash health plan Level 3)
• 6% employer pension contribution.
• Life assurance – 4 x salary.
• Income protection insurance – 75%   
• 28 days holiday plus 3 additional days, & further days for various key life events as well as the opportunity to sell up to 5 days per calendar year.
• Swap public/bank holidays each year for alternative days that align with your personal, cultural, or religious observances.  
• Enhanced family friendly and family forming policies.
• Access to a wide range of retail discounts .  
• Team Socials.