We know that sometimes people can be put off applying for a job if they don't tick every box. If you're excited about working for us and have most of the skills or experience we're looking for, please go ahead and apply. We’d love to hear from you!
About the role
As the Digital & Cyber Resilience Manager you will own the first-line design, embedding and evolution of HL's technical and cyber resilience capability across the Digital function. The role is accountable for the Technical Resilience Framework, cyber recovery capability and technical service continuity practices, ensuring engineering and platform teams design, operate and recover services in a way that protects HL's Important Business Services (IBS) from technology failure and cyber disruption, while enabling delivery velocity and supporting regulatory alignment.What you will be doing
- Own and evolve the Technical Resilience Framework, policies and standards on behalf of Digital, keeping them current, pragmatic and aligned to regulatory expectations.
- Embed resilience-by-design practices across engineering and platform teams through patterns, guardrails, playbooks and pragmatic guidance.
- Lead HL's Cyber Recovery capability, defining recovery objectives, cyber recovery plans and Minimum Viable Business (MVB) approach for systems supporting IBS.
- Drive technical service continuity, ensuring Criticality Assessments and data/system recovery plans are in place, current and owned by system owners.
- Own the technical resilience testing cycle, coordinating DR, failover, backup and cyber recovery exercises and reporting outcomes and remediation.
- Provide first-line technical service risk assessment for new and changing services through Architecture Panel / DPS TDA, acting as guardian of resilient change.
- Track and report on the resilience posture of Digital, providing management information, KRIs and evidence to support Digital Leadership and internal/external assurance.
- Strengthen technology cyber incident readiness in partnership with Cyber Defence, Incident Management and SRE, focusing on containment, recovery and clean-build capability.
- Collaborate with second-line Technology Risk, Operational Resilience, Business Continuity and Procurement to ensure aligned outcomes and clear ownership.
- Champion a resilience culture across Digital through the Engineering Chapter, community forums, learning content and coaching of engineering leaders.
About you
- Proven experience leading technical and/or cyber resilience, disaster recovery, or SRE capability in a complex regulated environment (financial services strongly preferred).
- Strong working knowledge of cyber recovery techniques including ransomware response, immutable backups, clean-build patterns and recovery orchestration.
- Solid understanding of hybrid infrastructure and cloud-native architectures (AWS preferred), covering redundancy, failover, dependency management and fault isolation.
- Practical experience designing and running resilience testing programmes including DR exercises, failover testing, chaos engineering and technical tabletop exercises.
- Working knowledge of relevant UK regulatory expectations (FCA/PRA Operational Resilience, Impact Tolerances, IBS protection, DORA-equivalent principles) and their translation into technology controls.
- Able to define and use KRIs, metrics and evidence to prioritise action and demonstrate control effectiveness to technical and non-technical audiences.
- Strong stakeholder influencing skills - able to build consensus across engineering, architecture, security, risk and operations without relying on direct authority.
- Comfortable operating as a first-line owner, partnering with 2nd-line assurance, Business Continuity and Third-Party Risk functions.
- Excellent written and verbal communication, able to translate technical resilience concepts for engineering, product and executive audiences.
- Relevant certifications welcomed but not essential (e.g. ISO 22301, CBCI, CISSP, ITIL, AWS Solutions Architect / Well-Architected).
Interview process
The interview process for this role is two stages including a technical competency-based question and a task.
Working Schedule
This role is based in Bristol head office, BS1 5HL. This role is permanent, full time, 37.5 hours per week, Monday to Friday. We have returned to the office 2 days a week.
Why us?
Here at HL, we’re the UK’s number 1 investment platform for private investors, based in Bristol. For more than 40 years we’ve helped investors save time, tax and money on their investments.
To achieve our mission, we believe we have a workplace like no other, with constant learning, dynamic teams, and a great ethos. We're steered by core values that promote service, quality, innovation, and opportunity in everything we do.
What's on offer?
- Discretionary annual bonus* and annual pay review
- 25 days* holiday plus bank holidays and 1-day additional Christmas closure
- Option to purchase an additional 5 days holiday**
- Flexible working options available, including hybrid working
- Enhanced parental leave
- Pension scheme up to 11% employer contribution
- Income Protection and Life insurance (4 x salary core level of cover)
- Private medical insurance*
- Health care cash plans - including optical, dental, and outpatient care
- Health screening programme
- Help@hand - confidential support including mental health counselling and remote GP
- Wellhub - unlimited access to fitness providers and wellness coach sessions
- Variety of travel to work schemes with bike storage and shower facilities
- Inhouse barista and deli serving subsidised coffee and sandwiches
- Two paid volunteering days per year
* dependant on role level
** only available to select during our annual benefits window, in November each year
Hargreaves Lansdown is an inclusive employer that values diversity in its workforce. We encourage applications from all individuals without regard to race, religion, gender, sexual orientation, national origin, disability or age.
This role may also be available on a flexible working or part time basis – please ask the Recruitment & Onboarding team for more information.
Please note, we are unable to provide employment sponsorship to candidates.
Skills Required
- Proven experience leading technical and/or cyber resilience, disaster recovery, or SRE capability in a complex regulated environment; financial services experience strongly preferred.
- Strong working knowledge of cyber recovery techniques, including ransomware response, immutable backups, clean-build patterns, and recovery orchestration.
- Solid understanding of hybrid infrastructure and cloud-native architectures, preferably AWS, including redundancy, failover, dependency management, and fault isolation.
- Practical experience designing and running resilience testing programs, including disaster recovery exercises, failover testing, chaos engineering, and technical tabletop exercises.
- Working knowledge of UK regulatory expectations, including FCA/PRA Operational Resilience, Impact Tolerances, Important Business Services protection, and DORA-equivalent principles.
- Ability to define and use KRIs, metrics, and evidence to prioritize action and demonstrate control effectiveness to technical and non-technical audiences.
- Strong stakeholder influencing skills across engineering, architecture, security, risk, and operations without relying on direct authority.
- Experience operating as a first-line owner while partnering with second-line assurance, Business Continuity, and Third-Party Risk functions.
- Excellent written and verbal communication skills, including translating technical resilience concepts for engineering, product, and executive audiences.
- Relevant certifications such as ISO 22301, CBCI, CISSP, ITIL, or AWS Solutions Architect/AWS Well-Architected are welcomed but not essential.
- Ability to work from the Bristol head office two days per week.
What We Do
We’re the UK’s number 1 investment platform for private investors, based in Bristol, where we now employ over 1,700 people. For more than 40 years we’ve helped investors save time, tax and money on their investments. Today we're trusted by over 1.7 million clients. Our service allows clients to bring all their ISAs, pensions, SIPPS, and savings into one easy to manage place, allowing them to be in control.
.jpeg)
