Director, Security Resilience

AVEVA is creating software trusted by over 90% of leading industrial companies.

Location: Cambridge | UK

Employment type: Full-time regular

Previous Experience:

• 10+ years in information security or enterprise risk management, with at least 5 years in a senior role biased towards building resilience capability.
• Experience designing and building crisis management and BCDR programmes in complex, multi-stakeholder environments.
• A proven track record as a people and/or department leader, with experience serving as an operational coordinator during live crisis or major incident events.

The job:

This position leads AVEVA’s newly established Security Resilience function within the central Digital Security organization, a strategic leadership role created to build and advance AVEVA’s capability in crisis management, business continuity, and enterprise-wide resilience. The role holder is accountable for ensuring that AVEVA can withstand, respond to, and recover from disruption whether from a cyber incident, operational failure, or external crisis event and that resilience requirements are embedded into AVEVA’s systems and ways of working by design.

This is a build role: the successful candidate will have the opportunity to establish this function from the ground up, defining the frameworks, tooling, and operating cadence that make AVEVA genuinely resilient at scale. The function must be continuously modernised through automation and innovation, so that resilience practices keep pace with the speed and complexity of AVEVA’s business.

We are building a highly integrated security practice where all security disciplines share and act in coordination on risk signal. The Director of Security Resilience must work closely with Cyber Defence whose incident response capability depends on resilience planning and with GRC to ensure resilience risk is captured in the enterprise risk register, and with federated IT and R demonstrated ability to build programmes from the ground up while simultaneously managing day-to-day resilience operations.

Desired/Preferred:

• Industrial software, OT/ICS environments, or technology companies serving critical infrastructure.
• Working within a large enterprise group resilience or security governance structure as a subsidiary leader, with accountability to a parent company.
• Working with AI and machine learning applications in resilience; for example, predictive risk modelling, automated scenario planning, or real-time recovery monitoring.
• Professional certifications: CBCP (Certified Business Continuity Professional), ISO 22301 Lead Implementer, CISSP, or equivalent.
• Commercial acumen and working knowledge of cloud-native resilience patterns, DevSecOps, and modern software delivery practices.

Competencies:

• Adaptable and resilient: Thrives in dynamic environments; maintains strategic focus through regulatory change and organisational evolution.
• Practical and logical: Structured thinking with a bias toward pragmatic, implementable solutions.
• Self-motivated and decisive: Comfortable making and owning decisions in ambiguous situations.
• Collaborative and influential: Earns influence through credibility and expertise; builds trusted relationships across federated teams and leadership.
• Transparent and courageous: Surfaces difficult resilience gaps and crisis findings; brings problems to leadership without softening the message.
• Curious and growth-oriented: Continuously learning about emerging threats, evolving resilience practices, and improvements in automation and crisis management tooling.

Digital Security at AVEVA:

Our Digital Security organization is responsible for protecting AVEVA’s digital estate and products across a federated security model. We pride ourselves on a collaborative, inclusive and authentic culture that provides a framework allowing for autonomy, whilst always being available for support and guidance. We respect the differences that each team member brings and seek to include those perspectives in our solutions for our business functions.

UK Benefits include:

• Flexible benefits fund
• Emergency leave days
• Adoption leave
• 28 days annual leave (plus bank holidays)
• Pension
• Life cover
• Private medical insurance
• Parental leave
• Education assistance program

It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.

Hybrid working:

We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.

Hiring process:

Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.

AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. AVEVA provides reasonable accommodation to applicants with disabilities where appropriate. If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.