Business Resilience Manager

At Simplyhealth, we're committed to improving access to healthcare for everyone in the UK. As our Business Resilience Manager, you'll play a critical role in ensuring our organisation can respond to, recover from and adapt to disruption, protecting our people, customers and services when it matters most.

This is an exciting opportunity to build on and continuously improve our Business Continuity and Operational Resilience capabilities. Reporting to the Head of Cyber Security & Business Resilience, you'll be responsible for maintaining and developing our resilience frameworks, policies, controls and governance processes, helping to ensure Simplyhealth remains resilient in an evolving risk landscape.

Working across Technology and the wider business, you'll collaborate with stakeholders at all levels to embed resilience thinking into everyday operations and support compliance with regulatory requirements and industry standards.

Key responsibilities include:

• Maintaining and continuously improving our Business Continuity Management System (BCMS).
• Managing Business Continuity policies, plans, business impact analyses and related governance activities.
• Developing and maintaining Operational Resilience frameworks aligned to regulatory and industry standards, including ISO 22301 and FCA Operational Resilience requirements.
• Conducting resilience mapping activities across people, technology, suppliers and facilities to identify and manage critical dependencies.
• Leading scenario testing and resilience exercises to validate our ability to remain within agreed impact tolerances during severe but plausible incidents.
• Coordinating annual disaster recovery testing and ensuring effective recovery planning across technology services.
• Supporting incident management activities, investigations and post-incident reporting, including recommendations for continuous improvement.
• Producing resilience metrics, management reporting and the annual Operational Resilience Self-Assessment for senior stakeholders and the Board.
• Delivering training, awareness programmes and exercises to strengthen resilience capability across the organisation.
• Working closely with business and technology teams to promote a culture where resilience, preparedness and risk awareness are embedded into decision-making.