Operational Resilience Analyst – Vulnerability Management & Scenario Testing | S2 | Chief Information & Resilience Office | Milton Keynes | Internal Mobility

Operational Resilience Analyst – Vulnerability Management & Scenario Testing | S2 | Chief Information & Resilience Office | Milton Keynes | Internal Mobility

Country: United Kingdom

IT STARTS HERE

Santander (www.santander.com) is evolving from a global, high-impact brand into a technology-driven organisation, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible.

This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference.

Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management.

Santander Digital Services is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over 7,000 people in 8 countries (Spain, Portugal, Poland, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms.

Applicants must possess a degree in Digital Technology Solutions or be on track to complete their degree by Q2 2027.

The requirement to successfully pass/complete the degree will be added as a condition at offer stage.

THE DIFFERENCE YOU MAKE

Santander UK is looking for an Operational Resilience Analyst – Vulnerability Management & Scenario Testing based out of Milton Keynes.

This vacancy is currently only open to those on the 2023 DTS Apprentice cohort.

This is a development opportunity suited to someone progressing from an apprenticeship into an analyst role. With guidance from experienced colleagues, you will help identify weaknesses that could disrupt important business services, track improvements and support scenario tests that explore how the bank would respond to severe but plausible disruption.

This is operational resilience vulnerability management, not cyber security vulnerability management. The focus is on weaknesses in the people, processes, technology, facilities, information and third-party dependencies that support services and customer outcomes. The role does not involve vulnerability scanning, software patching or security hardening. Cyber incidents may feature in resilience scenarios, but specialist cyber teams remain responsible for technical cyber vulnerability management.

You will be part of a team working across technology and the business, alongside service owners, operations, risk, compliance, business continuity, incident management and third-party teams. The team also engages with regulators and assurance functions; you will support this activity through accurate analysis, evidence and briefing materials, with opportunities to observe or contribute to discussions under supervision. You will not be expected to lead regulatory relationships or make independent risk acceptance decisions.

We’re shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:

• Support the identification and recording of operational resilience vulnerabilities using service mapping, scenario tests, incidents, assurance findings and information from business and technology teams.
• Help assess and categorise vulnerabilities under the team’s framework, considering the services affected, supporting dependencies, potential customer harm and the ability to remain within impact tolerances—the maximum tolerable disruption to an important business service.
• Maintain accurate vulnerability records, including evidence, accountable owners, agreed actions, target dates and status; follow up progress and escalate delays or gaps to senior colleagues.
• Support governance reviews by preparing concise updates and collating evidence for remediation, closure or risk acceptance decisions by the appropriate accountable owners and forums.
• Help prepare severe but plausible scenario tests, including objectives, assumptions, disruption timelines, exercise materials and participant briefings, under the direction of experienced colleagues.
• Coordinate workshops and test sessions across business and technology teams; support facilitators and record observations, decisions, actions and evidence.
• Help analyse test findings against recovery arrangements, service impacts and impact tolerances, distinguishing demonstrated capabilities from assumptions and untested areas.
• Support test reports, lessons learned and follow-up activity, linking identified weaknesses to vulnerability records and tracking agreed improvements.
• Prepare accurate management information, governance papers and supporting evidence for assurance reviews and regulatory engagement, subject to review and approval.
• Maintain team procedures, evidence registers and action trackers, suggesting practical improvements as your knowledge develops.

WHAT YOU’LL BRING

Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organisation. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.

The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Professional Experience:

• Experience gained through an apprenticeship, placement, study project or early-career role that demonstrates analysis, organisation and teamwork. Extensive operational resilience experience is not expected (Required)
• Ability to review information, identify gaps, maintain accurate records and explain findings clearly (Required)
• Experience contributing to shared tasks, following up actions and asking for support when needed (Required)
• Interest in how banking services depend on technology, business processes and third parties, and how disruption can affect customers (Required)
• Exposure to operational resilience, business continuity, incident management, risk management or testing activities. Training will be provided to build role-specific and regulatory knowledge (Preferred)

Education:

• Degree in Digital Technology Solutions, completed or on track for completion by Q2 2027, in line with the eligibility and offer conditions above (Required)
• Learning or project work involving business processes, technology services, data analysis, risk or service management (Preferred)
• Specialist cyber security qualifications are not required. Operational resilience knowledge will be developed through training, coaching and practical experience (Preferred)

Languages:

• Spanish (Preferred)

Hard Skills:

• Analysis and Record Keeping: Ability to organise information, check accuracy and maintain traceable evidence and action records (Required)
• Office Tools: Working knowledge of Excel, Word and PowerPoint to maintain trackers, summarise findings and prepare clear materials (Required)
• Service and Dependency Awareness: Basic understanding of how people, processes, technology and suppliers work together to deliver services, or a willingness to develop this understanding (Required)
• Operational Resilience: Awareness of important business services, impact tolerances, vulnerability assessment and scenario testing; detailed framework knowledge can be learned in the role (Preferred)
• Workshop and Test Support: Experience preparing materials, capturing notes or tracking actions from meetings, exercises or projects (Preferred)
• Workflow and Reporting Tools: Familiarity with tools such as JIRA, ServiceNow or Power BI for tracking actions and presenting information. Coding, security scanning and penetration testing skills are not required (Preferred)

Soft Skills:

• Clear Communication: Explain information in straightforward language and adapt written updates for business and technology audiences (Required)
• Curiosity and Judgement: Ask constructive questions, distinguish evidence from assumptions and recognise when to seek guidance or escalate concerns (Required)
• Collaboration: Work constructively with colleagues across teams, recognising different responsibilities and perspectives. Examples may come from an apprenticeship, study or project work (Required)
• Organisation and Attention to Detail: Manage agreed tasks, follow up actions and maintain accurate records within deadlines (Required)
• Willingness to Learn: Develop operational resilience, business and technology knowledge through feedback, coaching and practical experience (Required)
• Professionalism: Handle information appropriately and support governance, assurance and regulatory activity within agreed responsibilities and review arrangements (Required)

WE VALUE YOUR IMPACT

At Santander, your contribution matters. We recognise the difference you make every day, and we make sure you feel valued, supported and rewarded in return.
Here, recognition goes beyond pay. It’s about the pride you feel in your work, the impact you have on customers and communities, and the opportunities you have to grow and thrive — personally and professionally.

Salary Range:

£44,496.00 - £66,744.00 per annum (depending on experience)

This salary range represents the expected remuneration for the role. Annual salary is based on a standard 35-hour working week. Actual salary offered will depend on skills, experience, qualifications and location.

• Competitive rewards that reflect the real impact you make and the value you bring.
• Wellbeing that goes beyond work — we work with a range of wellbeing partners across our 4 pillars of wellbeing (physical, mental, social and financial) to give you access to a suite of apps, discounted gym and fitness access, weekly online classes, flexible healthcare and mental health support.
• Support for every life stage — from menopause and pregnancy to parenthood and beyond, with enhanced family leave, childcare options and tailored wellbeing support.
• Time to give back through volunteering opportunities that let you make a difference in the communities we serve.
• Global growth opportunities to shape your career, learn new skills and explore what’s possible across our international network.

Ready to be recognised? It starts with you.

LOCAL COMPLIANCE

At Santander, we’re proud to be an inclusive organisation that provides equal opportunities for everyone — regardless of age, gender, disability, civil status, race, religion or sexual orientation.

We’re committed to creating a recruitment experience that’s accessible, fair and welcoming for all candidates.

We want our people to thrive — at work and at home — while delivering the best outcomes for our customers and supporting each other to grow.

To make this possible, our roles are site-based with a hybrid working pattern, where colleagues are expected to attend the office at least 12 days per month (pro-rata for part-time roles).

When applying, please consider the travel distance, time and cost to your chosen office location.

We welcome applications on the understanding that, should you be offered this role, there may be no relocation package available. Santander will pay the employer mandatory government fees that are required to pay in connection with visa sponsorship. You may be liable for your own personal employee immigration and relocation costs.

IMPORTANT INFORMATION FOR INTERNAL APPLICANTS:

PERMANENT ROLES:

• If you are currently employed by Santander UK plc on TSB Legacy terms or by TSB and choose to apply for this Santander vacancy, please be aware that, if successful, you will move onto full Santander terms and conditions of employment and will no longer be part of the TSB Legacy population with effect from the start date of your new role.

WHAT TO DO NEXT

If this sounds like a role you are interested in, then please apply.

For further Guidance please visit Internal Mobility - Candidate Guidance.

If you want to know more about the opportunity:

Please contact Richard Bright or William Mackay- Richard.Bright@santander.co.uk or William.mackay@santander.co.uk

#LI-DNI