IT Resilience Manager

Overview

In this role you ensure Burberry’s technology services withstand and recover from disruptive events. You will govern resilience policies across critical services, collaborating with SIAM, cyber security, and business continuity teams. You will lead resilience exercises, reviews, and reporting to senior leadership. This position sits at the intersection of technology risk, governance, and operational resilience, helping Burberry protect its systems and data. You will contribute to the company’s mission of sustainable luxury by strengthening cyber and IT resilience at scale.

Responsibilities

• Maintain a view of critical business services and dependencies with recovery priorities reflecting business impact
• Manage IT Resilience policy framework and supporting Cyber Resilience, IT Disaster Recovery and IT Backups policies
• Define minimum requirements for recovery planning, backups, resilience controls, testing, and reporting
• Address cyber-led disruption scenarios within resilience requirements
• Review ITDR plans and test outcomes for alignment with policy and recovery objectives
• Oversee annual IT resilience and cyber recovery exercise and cross-service coordination
• Conduct monthly assurance reviews of recovery plans, backups, resilience controls, testing and remediation actions
• Maintain resilience reporting for critical technology services including recovery capability and risk remediation progress
• Ensure clear ownership and action dates for resilience and recovery gaps with service owners and platform teams
• Provide guidance on resilience for service design, architecture, supplier obligations and operational processes
• Collaborate with Cyber Security Operations and IT Risk on cyber-specific resilience capabilities
• Align ITDR and cyber recovery planning with wider business continuity requirements
• Report resilience posture and maturity to Cyber & Risk leadership and governance forums

Key requirements

• Proven experience in IT disaster recovery, IT resilience, technology risk, or resilience assurance roles
• Strong understanding of IT resilience, cyber resilience, disaster recovery and backup in hybrid cloud and on-premise environments
• Experience reviewing service-level recovery plans, test evidence and resilience controls against policy and standards
• Experience leading resilience exercises, simulations or testing across multiple services, teams and suppliers
• Ability to work with service owners, platform teams, SIAM, cyber, architecture, suppliers and business continuity stakeholders
• Strong governance and reporting skills with ability to present resilience posture, risks and improvement actions to senior stakeholders
• Familiarity with cyber-led disruption scenarios (ransomware, data loss, destructive attacks, outages)
• Knowledge of service management, supplier management and operational resilience practices supportive of the role
• Relevant certifications such as BCI, ISO 22301, ISO 27001, ITIL or equivalent are desirable

• Governance and reporting
• Stakeholder collaboration
• Scenario-based thinking
• IT disaster recovery
• IT resilience
• Cyber resilience

…