Senior Business Continuity Specialist | S4 | Chief Information & Resilience Office | Multiple Locations

Job description

Senior Business Continuity Specialist | S4 | Chief Information & Resilience Office | Multiple Locations Country: United Kingdom IT STARTS HERE Santander (www.santander.com) is evolving from a global, high-impact brand into a technology-driven organisation, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible. This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference. Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management. Santander Digital Services is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 7,000 people in 8 countries (Spain, Portugal, Poland, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms. THE DIFFERENCE YOU MAKE Santander UK is looking for a Senior Business Continuity Specialist based out of Milton Keynes or Glasgow. Own and continuously improve Santander UKs Business Continuity and OCIR frameworks, including the risk and control environment; ensuring policies, standards and methodologies are effectively embedded and compliant across the business. Provide thought-leadership and specialist guidance to develop long term strategy, continually focused on strengthening business continuity effectiveness. Drive remediation of identified weaknesses and improve organisational resilience through robust, credible and tested continuity planning. Able to provide recommendation to executive leadership and challenge as needed. A senior contributor role within Line 1 accountable for the management, monitoring and embedding of effective risk management practices and standards across San UK, ensuring senior management understands their own risk profile with regards to business continuity. The role will manage or support the impacts of any regulatory requests and liaise with key internal stakeholders / teams to deliver the requirements, as well as oversee and implement any local changes resulting from regulatory developments or audit points. This role will effectively manage a wide range of risk associated responsibilities, as appropriate depending on the Directorate, to include but not restricted to; Third Party Supplier Risk Management, Segregation of Duty, Business Continuity Planning, End User Computing, Record & Retention, Operational Risk Assessment completion, Scenario Analysis, Anti-Bribery & Corruption, Audit & Compliance Recommendations, S-OX & COSO control framework, Data Security. The Line 1 Senior Risk Manager will be the Risk subject matter expert of the Directorate, run internal governance forums and will make risk related decisions on behalf of the senior management team. We’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for: Business Continuity Framework Ownership - Own, maintain and continuously improve the enterprise Business Continuity Management Framework, embedding the standards and methodologies necessary to enable effective and consistent continuity planning across the organisation. Business Continuity Risk & Control Framework - Own and maintain the BCM risk and control framework, including definition of key risks, minimum control requirements, control objectives and associated assessment methodologies. Ensure the framework enables effective identification, management, escalation and remediation of business continuity risks and control weaknesses. Framework Embedding & Business Adoption - Drive effective embedding of BCM requirements across the business, translating policy and regulatory expectations into practical requirements that can be consistently implemented. Partner with business and functional stakeholders to build ownership, improve maturity and ensure continuity considerations are embedded into business-as-usual activities and material change. Business Continuity Planning Standards - Define and maintain enterprise requirements for Business Impact Analysis, continuity strategies, Business Continuity Plans, recovery requirements and dependency assessment. Establish appropriate quality standards and provide specialist guidance and challenge to ensure plans are credible, actionable and capable of supporting the organisation through significant disruption. Exercising, Testing & Continuous Improvement - Own the enterprise BCM exercising and testing methodology, establishing minimum requirements and standards for demonstrating continuity capability. Use exercise outcomes, incidents, assurance activity and emerging risks to identify systemic weaknesses and drive improvements to the framework and underlying business continuity capability. Oversight, Challenge & Management Information - Establish mechanisms to assess implementation and effectiveness of the BCM framework across the organisation. Provide specialist oversight and constructive challenge, identify material gaps or areas of non-compliance, and ensure risks and remediation are appropriately escalated. Develop meaningful MI that provides senior management with visibility of BCM risk, control effectiveness, compliance, maturity and emerging themes. OCIR Framework & Requirements - Own and maintain the organisation's framework and requirements for Operational Continuity in Resolution (OCIR), ensuring applicable regulatory requirements are translated into sustainable business processes, controls and governance. Coordinate relevant stakeholders to maintain appropriate capabilities, evidence and documentation supporting the continuity of critical services in resolution and oversee identification and remediation of OCIR risks and gaps. Regulatory, Risk & Governance Engagement - Act as a senior subject-matter expert for BCM and OCIR, supporting engagement with senior management, Risk, Internal Audit and relevant regulatory stakeholders. Monitor regulatory developments and industry practice, assess their implications and ensure the BCM and OCIR frameworks remain appropriate, effective and aligned with the organisation's risk-management expectations. WHAT YOU’LL BRING Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organisation. We’re enabling teams to go beyond by valuing who they are and empowering what they bring. The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Professional Experience Business Continuity Framework Ownership: Extensive experience developing, embedding and continuously improving enterprise-wide business continuity frameworks, policies and standards within financial services or a similarly regulated organisation. (Required) Business Continuity Risk and Controls: Proven track record establishing risk and control frameworks, assessing control effectiveness, and driving the identification, escalation and remediation of continuity risks. (Required) Business Impact Analysis and Continuity Planning: Substantial practical experience defining and challenging business impact analyses, recovery requirements, dependency assessments, continuity strategies and business continuity plans. (Required) Exer