Business Continuity and Crisis Risk Lead

Role OVO-View

Team: Risk

Salary banding: £65,000 - £75,000

Working pattern: Full-Time

Reporting to: Head of Risk

Sponsorship: Unfortunately we are unable to offer sponsorship for this role.

Top 3 qualities for this role: Resilient, Analytical, Communicator

 

Where you’ll work:

For this role, we would expect you to be in the office 3-4 times per week, and to go to OVO Connection events in-person. 

You’ll be assigned to the closest one of our three hub offices, Bristol, Glasgow, or London; unless your role requires field-based work. Each hub has accessible spaces to park your laptop, is designed to inspire people, help them connect and bring big ideas to life.

Everyone belongs at OVO

At OVO, we are on a mission to solve one of humanity's biggest challenges, the climate crisis. And we know it takes all of us to change the world. That's why we need diverse people from all abilities, gender identities, ethnicities, ages, sexual orientations, life experiences and backgrounds to join us.

Teamworking for the planet

Everything we do here spins around Plan Zero. So, naturally, the team you’ll be joining plays a gigantic role in making that happen. Here’s how:

We’re hiring world-changers. Our Regulation, Risk and Policy team, dedicated to steering OVO’s strategic initiatives, is integral to achieving our overarching goal of net zero carbon living. With a clear focus on risk, compliance and regulatory excellence and sustainable and ethical practices, we play a crucial role in shaping the policies and processes that drive our Plan Zero ambitions. Join us in making a definitive impact on the future of energy.

This role in a nutshell:

As a Business Continuity and Crisis Risk Lead, you’ll lead our business continuity strategy – overseeing our frameworks for business continuity and crisis management, and supporting risk management for tech risk and associated controls. Your role will be pivotal to making sure our continuity planning and crisis response capability is robust, and we have the right controls in place to respond to our risk.

Your key outcomes will be:

• Implementing and maintaining OVO’s Crisis Management Framework and Business Continuity Management System (BCMS) ensuring alignment with ISO 22301, ISO 27001 and other industry standards and regulatory requirements.
• Overseeing the Business Impact Analysis and Risk Assessment processes to understand OVO’s critical business functions.
• Quantifying and modeling the value of risk from impact analysis, continuity threats and preparedness assessments to develop risk scenarios for potential Business Continuity and Crisis incidents.
• Coordinating the development of Crisis and Business Continuity Plans with key stakeholders making sure they align to and respond to risk.
• Organising and facilitating business continuity and crisis management exercises making sure stakeholders are engaged and ready.
• Training team members on business continuity and crisis management processes and raising awareness overall awareness of business continuity.
• The ideal candidate would also be able to provide support to our risk team on technology risk more generally, for example:
• working closely with the Tech Leadership team to understand our risk.
• contributing to technical risk assessments where needed.
• developing a risk appetite framework around technology risk 
• advising on control measures to mitigate our business technology risk.

You’ll be a successful Business Continuity and Crisis Risk Lead here at OVO if you…

• Keep up to date with the business continuity and crisis risk landscape through a strong peer network learning lessons from other organisations.
• Think proactively about business continuity as the risk landscape evolves, respond as best practice evolves too, and challenge our leadership through plausible and imaginative crisis scenarios. 
• Have a minimum of 5 years experience in continuity and crisis management with experience of risk management.
• Have expertise in ISO 22301 Business Continuity Management Systems and understand the interaction with enterprise risk management and information security continuity requirements arising from ISO 27001.
• Have a professional business continuity or risk management certification such as Business Continuity Institute (BCI) CBCI qualification, Institute of Risk Management (IRM) certificate in enterprise risk management or equivalent.
• Have strong verbal and written communication skills, and are comfortable communicating with stakeholders at all levels.
<