CTOi Operational Resilience Governance Lead

Role: CTOi Operational Resilience Governance Lead

Location: Sheffield - office presence required

Start Date: August 2026

End Date: 6-12 Months

Daily Rate: Inside IR35

Payroll provider – Rockford Payroll Info for Contingent Workers – Rockford Pay

This is an exciting opportunity to join Deloitte Operations for an engagement with one of our clients.

The Role

The role of CTOi Operational Resilience Governance Lead is responsible for defining and delivering policy and process that enables the identification and management of technology resilience vulnerabilities.

Key Responsibilities

· Ownership of operating model, process and procedures for technology resilience vulnerability management

· Drive engagement with Operational Resilience Central Capability (ORCC), ensuring alignment with Mandatory Procedures & Operating Instructions that enable Technology stakeholders to meet the requirements of the Bank and regulators

· Oversight and monitoring of process execution, driving adherence to defined policy and process, bringing transparency to exceptions and enabling stakeholders to be successful

· Drive maturity of policy and governance activity in line with expectations of the Risk Management Framework and the operation of technology controls

· Establish and monitor Key Control Indicators (KCIs) and Key Performance Indicators (KPIs) for resilience vulnerability management

· Actively maintain a view of risks and improvements across policy and governance approach, define and drive maturity plans, identify and own MSII's and lead engagements with Group Internal Audit and Enterprise Risk Management

· Engage & collaborate with peers within CTOi Operational Resilience function and broader technology controls community on governance best practice and maturity

· Develop relationships with a broad range of stakeholders, ensuring policy is clear, process enables success and governance ensures adherence

Experience & Skills Required

· Previous experience in governance roles and managing technology controls

· Track record of driving control compliance and maturity

· Proven ability in defining, documenting and communicating policy and process

· Deep understanding of the banks Risk Management Framework and proven experience of leading engagements with Second and Third Lines of Defence

· Excellent communication skills, with evidence of influencing stakeholders at all levels in the organization and managing relationships across technology, business and COO functions

· Evidence of stakeholder management where priorities and expectations differ, and needs may conflict

· Experience or knowledge of Operational Resilience as it pertains to financial institutions and associated regulatory requirements is desirable but not essential.