Business Resilience Manager (Andover)

Job Description

n

About the role

n

At Simplyhealth, we're committed to improving access to healthcare for everyone in the UK. As our Business Resilience Manager, you'll play a critical role in ensuring our organisation can respond to, recover from and adapt to disruption, protecting our people, customers and services when it matters most.

n

This is an exciting opportunity to build on and continuously improve our Business Continuity and Operational Resilience capabilities. Reporting to the Head of Cyber Security & Business Resilience, you'll be responsible for maintaining and developing our resilience frameworks, policies, controls and governance processes, helping to ensure Simplyhealth remains resilient in an evolving risk landscape.

n

Working across Technology and the wider business, you'll collaborate with stakeholders at all levels to embed resilience thinking into everyday operations and support compliance with regulatory requirements and industry standards.

n

Key responsibilities include:

n

n
• Maintaining and continuously improving our Business Continuity Management System (BCMS).

n

• Managing Business Continuity policies, plans, business impact analyses and related governance activities.

n

• Developing and maintaining Operational Resilience frameworks aligned to regulatory and industry standards, including ISO 22301 and FCA Operational Resilience requirements.

n

• Conducting resilience mapping activities across people, technology, suppliers and facilities to identify and manage critical dependencies.

n

• Leading scenario testing and resilience exercises to validate our ability to remain within agreed impact tolerances during severe but plausible incidents.

n

• Coordinating annual disaster recovery testing and ensuring effective recovery planning across technology services.

n

• Supporting incident management activities, investigations and post-incident reporting, including recommendations for continuous improvement.

n

• Producing resilience metrics, management reporting and the annual Operational Resilience Self-Assessment for senior stakeholders and the Board.

n

• Delivering training, awareness programmes and exercises to strengthen resilience capability across the organisation.

n

• Working closely with business and technology teams to promote a culture where resilience, preparedness and risk awareness are embedded into decision-making.

n

n

…