Head of Enterprise Resilience - Information Security & Risk

About this role

Head of Enterprise Resilience - Security & Risk - Hybrid - London - Permanent

Leading Enterprise-Wide Resilience, Security & Third-Party Risk

I am working with a leading Insurance client who are seeking an experienced Head of Enterprise Resilience to lead and mature its resilience strategy across operational continuity, cyber risk, information security, supplier oversight, and crisis management.

This is a senior leadership opportunity for an individual who can balance strategic vision with practical execution, ensuring the organisation can anticipate, withstand, respond to, and recover from operational disruptions that face organisations in a complex risk environment.

You will form key relationships with executive stakeholders, driving resilience initiatives across the business, ensuring strong governance frameworks, and overall embedding a proactive risk culture.

Enterprise Resilience & Business Continuity

• Develop and enhance the enterprise resilience framework across the organisation.
• Lead business continuity, crisis management, and recovery planning activities.
• Conduct resilience assessments, scenario testing, and simulation exercises.
• Identify operational vulnerabilities and drive mitigation strategies.
• Establish meaningful resilience metrics, reporting, and governance processes.

Information Security & Risk

• Provide leadership across cyber risk and information security programmes.
• Oversee security governance, policies, and risk management frameworks.
• Support the assessment and management of emerging cyber threats.
• Drive security awareness initiatives across the wider business.
• Ensure effective oversight of security incidents, control environments, and regulatory obligations.

Third-Party & Supplier Risk

• Develop a robust supplier governance and outsourcing framework.
• Ensure appropriate due diligence and ongoing oversight of critical suppliers.
• Monitor supplier performance, risk exposure, and service quality.
• Strengthen third-party risk management practices across the organisation.

Leadership

Lead, mentor, and develop a specialist resilience and risk team.

• Build strong relationships with senior business leaders and key stakeholders.
• Present insights, recommendations, and risk reporting at executive and board level.
• Champion a culture where resilience, security, and risk management are embedded into business decision-making.

Experience

• Significant experience leading enterprise resilience, operational resilience, cyber risk, or information security functions.
• A strong understanding of governance, risk management, and regulatory environments.
• Experience operating within a complex, highly regulated organisation.
• A proven track record of influencing senior executives and board-level stakeholders.
• Strong leadership skills with the ability to develop high-performing teams.
• stakeholder management, and strategic planning capabilities.
• Experience within financial services - ideally Insurance.
• Certifications - CISM, CISSP, CRISC, CBCI, MBCI, or equivalent.

If you have the relevant skills and knowledge and keen to understand more, please forward your profile for an immediate review.

Data & Application Notice

We process personal data submitted as part of your application for recruitment purposes in line with UK GDPR. All applications are reviewed by a member of our team, we do not use automated decision-making in our selection process.

Your application will be assessed against the requirements of this role.

By applying to this advert, you consent to receiving future relevant roles and industry news and insights from us. To opt out of this, please contact: compliance@pioneer-search.com.

For more information on how we use your data, including how long we retain it & your rights, please refer to our Privacy Policy: www.pioneer-search.com/privacy-policy.

About risk & resilience roles for ex-police

Risk management, business continuity and emergency-planning roles. Contingency planning, threat assessment and multi-agency coordination experience from policing is directly transferable.