The Business Continuity Manager will lead the development, implementation and continuous improvement of a Group-wide Business Continuity and Operational Resilience capability across Zellis, Moorepay, Benifex and Hastee. Reporting to the Group CIO, the role is responsible for ensuring the organisation can anticipate, withstand, respond to and recover from disruptive events whilst protecting customers, colleagues, revenue and critical business services.
Operating at both strategic and operational levels, the role will partner with Senior Leadership Teams, functional leaders and technology teams to embed resilience into the Group's operating model, ensuring continuity plans are tested, measurable and capable of supporting a high-growth, private equity-backed SaaS business
Working across Zellis, Moorepay, Benifex and Hastee, you will turn business priorities, existing plans and technical recovery procedures into a clear, coordinated and tested approach for maintaining and recovering critical services during disruption.
This is a hands-on role for an experienced business continuity professional. You will be expected to operate with a high degree of independence, build strong relationships with senior leaders and service owners, and drive decisions and actions to completion. The emphasis is on executable plans and proven readiness, rather than creating a separate compliance function.
Key Responsibilities
• Own the Group business continuity framework: Maintain a proportionate business continuity management system, policy set, standards, governance, annual plan and improvement roadmap.
• Lead business impact analysis: Work with each business area to identify critical services and processes, agree recovery time and recovery point objectives, and document people, technology, data, site and supplier dependencies.
• Build executable continuity plans: Ensure each critical area has a clear, usable and current plan covering loss of technology, sites, people, suppliers and other material disruption scenarios.
• Orchestrate end-to-end recovery: Create and maintain the master recovery sequence that connects business priorities to owned operational and technical runbooks, including identity, access, communications, infrastructure, products and customer operations.
• Strengthen crisis management: Define invocation criteria, decision rights, escalation routes, response roles, event logging and internal, customer, media and regulatory communication requirements.
• Run exercises and prove readiness: Design and facilitate tabletop and live exercises, including executive participation, and ensure lessons learned, gaps and remediation actions are tracked through to evidenced closure.
• Assure critical suppliers: Work with Procurement, Security and service owners to assess critical suppliers and sub-processors, confirm contractual recovery obligations and test that their continuity arrangements are adequate.
• Provide practical assurance: Maintain audit, customer due diligence and regulatory evidence; report risks, readiness, testing outcomes and overdue actions clearly to the Group CIO, Executive Leadership Team and relevant governance forums.
• Build capability across the Group: Deliver role-based training and awareness for plan owners, recovery teams and crisis leaders so that responsibilities can be performed confidently during an incident.
• Drive continual improvement: Keep plans aligned to organisational, service, technology and supplier change, and use incidents, exercises, audits and industry developments to improve resilience.
• Partner with Senior Leadership: Embed resilience thinking into strategic decision-making, transformation initiatives and operating model changes. Produce resilience dashboards and reporting that provide clear visibility of risks, readiness levels and remediation priorities.
• Strengthen operational resilience: Support the identification, mapping and protection of important business services and critical business operations and maintain end-to-end visibility of service dependencies across people, process, technology, suppliers and data.