Operational Resilience & Technology Risk Business Partner in London

How you'll help us live our purpose We've been helping our members save for their future and buy their own home since 1875. Join us and you'll play a big role in helping us to put home ownership within reach of more people, generation after generation. It's a purpose that drives everything we do. And you can play your part too – we're looking for an Information Security and Resilience Business Partner to provide robust oversight and independent challenge across operational resilience, technology resilience and resilience assurance, helping Leeds Building Society protect our members, colleagues and services. How you'll make a difference In this role, you'll oversee the development, embedding and ongoing effectiveness of our Operational Resilience framework, assessing whether our approach is practical, evidence-based and aligned with regulatory expectations and the needs of the business. You'll lead thematic and targeted assurance reviews across operational resilience, technology resilience, IT risk and information security. You'll assess the design and effectiveness of controls, test the quality of resilience evidence and translate your findings into clear, meaningful risk reporting for governance forums. A key part of the role will be providing independent oversight and constructive challenge to first-line teams. You'll evaluate resilience risks, scenarios, testing, remediation plans and risk acceptances, ensuring decisions are well supported and that weaknesses are addressed in a timely and proportionate way. You'll also oversee technology resilience and third-party resilience activity, including due diligence and information security reviews where needed. By building effective relationships with operational and technology teams, Internal Audit, risk colleagues and wider stakeholders, you'll provide credible assurance while maintaining appropriate independence. This role offers the chance to shape resilience oversight at the heart of important business and technology change. You'll strengthen assurance coverage, improve the quality of management information and governance reporting, and independently challenge how resilience is designed, tested and evidenced, while contributing to our CORE transformation programme. What will you bring to the role? We're looking for someone with sound judgement, curiosity and the ability to form independent, evidence-based conclusions in a changing environment. You'll be pragmatic, adaptable and able to influence at all levels, along with: Strong knowledge of operational resilience and technology resilience controls, with experience assessing their design and effectiveness. Knowledge of relevant regulatory expectations for operational resilience, technology and information security risk, and third-party management, ideally within financial services. Experience planning and delivering risk-based assurance or thematic reviews, evaluating evidence and controls, and producing clear reports for senior management and governance forums. An independent mindset and the credibility to provide constructive, professional challenge at senior management level, while maintaining effective stakeholder relationships. The ability to assess resilience scenarios, testing outcomes, vulnerabilities, remediation plans and risk acceptances, identifying gaps and tracking actions through to effective closure. Strong communication, report-writing, data-analysis and facilitation skills, with the curiosity to deepen your expertise across operational resilience, technology resilience and assurance. A relevant qualification such as CISA, ISO 27001 Lead Auditor or ISO 27001 Lead Implementer would be advantageous but not essential. And in return, you'll get the best from us: Hybrid working – 2 days per week in the office Annual bonus of up to 12% Matched pension contributions up to 10% 26 days holiday, plus