United Kingdom · Compliance, quality and safety · Principal/Manager (12-16 years)

Resilience Manager

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

Start my Resilience Manager plan, free

Free to start: a plan built for this role, and a Future Fluency module to try first. No card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Upskilling a team in this role? Talk to us

Experience bandPrincipal/Manager (12-16 years)
Direct reports3-8 reports
Reports toDirector of Enterprise Resilience
UK framework levelUsually a manager, or the deepest specialist in a team

Also advertised as Business Continuity Manager · Crisis Management Lead · Organisational Resilience Lead

Built on 43,079 real UK job descriptions we analysed · grounded in qualifications employers recognise

Two short quizzes about you

1From this job to a course

The qualifications matched to this job

ATHE Level 6 Award in Security Risk Management Consultancy ATHE Ltd · Level 6 · covers 3 of 8 standards

SFJ Awards Level 5 Certificate for the Security Risk Management Practitioner (RQF) SFJ Awards · Level 5 · covers 2 of 8 standards

IRM's Level 5 International Certificate in Financial Services Risk Management Institute of Risk Management · Level 5 · covers 2 of 8 standards

CMI Level 5 NVQ Diploma in Management and Leadership Chartered Management Institute · Level 5 · covers 1 of 8 standards

ProQual Level 4 NVQ Diploma in Management ProQual Awarding Body · Level 4 · covers 6 of 8 standards

OCNLR Level 4 Certificate in Business Administration OCN London · Level 4 · covers 3 of 8 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

organisational Resilience ATHE Level 6 Award in Security Risk Management Consultancy

Business continuity and the disaster recovery process SFJ Awards Level 5 Certificate for the Security Risk Management Practitioner (RQF)

Resilience IRM's Level 5 International Certificate in Financial Services Risk Management

Manage business risk CMI Level 5 NVQ Diploma in Management and Leadership

Implement and maintain business continuity plans and processes ProQual Level 4 NVQ Diploma in Management

Business Continuity Planning OCNLR Level 4 Certificate in Business Administration

The future skills this job leans on

AI Fluency working with AI as a thinking partner

Data Fluency turning numbers into a decision

AI Governance Fluency using AI responsibly

Frontier Fluency the next wave, beyond mainstream AI

Trust Fluency keeping the digital world safe

Start my Resilience Manager plan, free

Your Plan Illustration

Built for Resilience Manager

6 units that map to this job, from the qualifications that cover it.

organisational Resilience ATHE Ltd · covers 3 of 8 standards Level 6
Business continuity and the disaster recovery process SFJ Awards · covers 2 of 8 standards Level 5
Resilience Institute of Risk Management · covers 2 of 8 standards Level 5
Manage business risk Chartered Management Institute · covers 1 of 8 standards Level 5
Implement and maintain business continuity plans and processes ProQual Awarding Body · covers 6 of 8 standards Level 4
Business Continuity Planning OCN London · covers 3 of 8 standards Level 4

These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as a Resilience Manager?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

AI-Driven Predictive Risk Analytics
Quantum-Safe Resilience Planning

Why each one is rising

The future skills this job leans on

AI Fluencyworking with AI as a thinking partner
Data Fluencyturning numbers into a decision
AI Governance Fluencyusing AI responsibly
Frontier Fluencythe next wave, beyond mainstream AI
Trust Fluencykeeping the digital world safe

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your Resilience Manager plan as you set up, starting with a Future Fluency module on using AI in your job. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

Start my Resilience Manager plan, free Ready to pay? Subscribe for £70 a month

3What this role really is

A resilience manager builds plans to keep a business running when things go wrong. The work covers leading a team, planning for disruption, and preparing the organisation to cope with a wide range of risks.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

Fusion Framework System (or similar BCM platform) Strategic

Leading platform selection and integration strategy. Defining the enterprise data architecture for resilience within the platform, ensuring it meets our strategic needs and provides actionable insights.

ServiceNow GRC (or similar GRC/EHS system) Architect

Designing the interplay between GRC and Resilience modules. Governing the enterprise risk taxonomy within the system to ensure consistency and comprehensive risk visibility.

Everbridge (or similar Emergency Comms platform) Strategic

Setting the enterprise crisis communication technology strategy, managing vendor relationships, and ensuring the platform integrates seamlessly with our overall incident response framework.

Power BI / Tableau Strategic

Defining the key resilience metrics (KRIs/KPIs) and visualisation standards for executive and board-level reporting. Ensuring dashboards provide clear, actionable insights into our resilience posture.

Confluence / SharePoint / MS Teams Strategic

Governing the enterprise-wide documentation strategy for all resilience and crisis management plans. Ensuring knowledge is organised, accessible, and supports effective collaboration during incidents.

Advanced Excel (Power Query, VBA) Advanced

Occasionally diving into complex data sets for ad-hoc analysis, building sophisticated models for risk quantification, or automating reporting processes not yet integrated into formal platforms. You're not afraid of a spreadsheet.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choice	Coming in	Where you are now	The step above
Programme Strategy & Vision	N/A (Executes defined tasks)	N/A (Contributes to existing strategy)	Defines and proposes the 3-5 year resilience strategy to the Director of Enterprise Resilience and ELT for approval. Owns the roadmap.
Budget Allocation & Spend	No authority (follows instructions)	Recommends tool purchases under £5K to manager	Owns and manages the resilience department's budget (£500K-£2M). Approves spending up to £50K independently; consults Director for £50K-£250K; requires Director/ELT approval for anything above £250K.
Team Hiring & Performance	N/A	N/A	Full authority for hiring, performance management, and termination decisions for direct reports (L1-L3 Resilience roles), in consultation with HR.
Vendor Selection & Management	N/A	Recommends specific tools or services to manager	Selects and manages key resilience vendors (e.g., BCM platforms, emergency comms) up to £100K contract value. Consults Director for larger, strategic vendor relationships.
Incident Response Activation	N/A	N/A	Authorises the 'invoking of the plan' for significant incidents, activating the crisis management team and directing initial response efforts, in consultation with the Director/ELT as appropriate.

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Resilience Maturity Model Score

Improvement in the organisation's overall resilience capability as assessed against an industry-recognised maturity model (e.g., ISO 22301 framework).

Target · Increase score from 2.5 to 3.5 over 24 months

Current score is 2.8, target is to hit 3.0 by year-end by implementing a new BIA tool and completing 80% of identified gaps.

Critical Business Function RTO/RPO Compliance

Percentage of critical business functions (CBFs) that have documented recovery time objectives (RTOs) and recovery point objectives (RPOs) that are met in exercises or actual incidents.

Target · 95%+ compliance for top 10 CBFs

After a system outage, the RTO for our order processing system was 4 hours; actual recovery was 3.5 hours, meaning we met the target. We'll track this across all critical systems.

Exercise Programme Completion & Gap Closure

Percentage of planned resilience exercises completed on schedule and the closure rate of high-priority corrective actions identified from those exercises.

Target · 100% exercise completion; 90% high-priority action closure within 90 days

We ran all 4 planned tabletops this quarter. Of the 15 high-priority gaps identified, 13 have been fixed or have clear plans in place, hitting 87%.

Financial Impact Reduction (Scenario-based)

Reduction in the estimated maximum potential financial impact of the top 5 identified risk scenarios through targeted mitigation strategies.

Target · 20% reduction in impact over 12 months

Our top cyber-attack scenario had an estimated £5M impact. After implementing new controls and a better recovery plan, the revised impact is £4M, a 20% reduction.

Executive & Board Confidence

The level of confidence senior leadership and the Board's Risk & Audit Committee have in the organisation's resilience posture.

You'll know you're doing well when the Board's Risk & Audit Committee gives a 95%+ confidence rating in your quarterly updates. This also looks like being proactively invited to strategic planning sessions, having your recommendations adopted without significant pushback, and getting positive feedback on your clear, concise reporting.

Cross-Functional Engagement & Buy-in

How well you get other departments to genuinely participate in and take ownership of their resilience responsibilities.

Evidence includes business units actively seeking your input on new projects, voluntarily completing BIA refreshes on time, and leaders bringing their teams fully engaged to exercises rather than just sending a junior. You'll see this in positive feedback from business unit heads about the value you add, not just the compliance you enforce.

Team Development & Retention

The growth and stability of your direct reports, indicating effective leadership and mentorship.

This will show up in your team members progressing to higher levels, positive feedback during their performance reviews, and a low voluntary turnover rate. You'll see your team members confidently leading their own projects and proactively identifying improvements to our resilience programme.

Incident Response Effectiveness (Post-Mortem)

The quality and thoroughness of post-incident reviews, leading to actionable improvements.

After any incident, big or small, you'll lead the After Action Review (AAR). Success means the AARs are comprehensive, identify clear root causes, and result in practical, prioritised actions that actually get implemented. The business will see these AARs as valuable learning opportunities, not just blame games.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy

Protecting the Organisation

You'll get a real buzz from identifying a new threat, designing a robust solution, and seeing your team implement it. The idea of safeguarding the company from potential disaster is what gets you out of bed.

Successfully leading the implementation of a new backup data centre, knowing it significantly reduces the risk of a major data loss event.

Building & Leading a High-Performing Team

You thrive on mentoring your direct reports, seeing them grow, and empowering them to take ownership of their areas. You enjoy fostering a culture of preparedness and continuous improvement within your team.

Your junior analyst successfully leads their first BIA refresh for a critical department after your coaching, delivering a high-quality outcome.

Solving Complex, Multi-Dimensional Problems

The challenge of unravelling complex interdependencies, designing solutions that span multiple departments, and anticipating 'what if' scenarios is genuinely exciting to you. You love a good puzzle, especially one with high stakes.

Designing a new enterprise-wide incident response framework that seamlessly integrates IT, HR, Legal, and Operations during a major cyber incident.

What frustrates people

The 'Prophet of Doom' Stigma: Constantly planning for worst-case scenarios can lead to being perceived as negative, rather than as a strategic safeguard.
Budget Battle Fatigue: Fighting for funding for 'what if' scenarios against departments with clear, immediate ROI is a relentless, uphill battle. Resilience is a cost centre until the day it saves the company.
Exercise Apathy: Getting senior leaders to fully engage in a tabletop exercise – instead of checking their phones – is a major challenge. Many see it as a compliance checkbox, not a critical rehearsal.
The Out-of-Date Contact List: Discovering during a real incident that the critical call tree contains numbers for people who left the company six months ago.
Shadow IT & Rogue Vendors: A department signs a contract with a new, business-critical SaaS provider without any resilience or security due diligence, creating a massive blind spot and a new SPOF.
Explaining Probabilities to Executives: Trying to justify investment based on a low-probability, high-impact event is often met with 'that will never happen here.'
The Black Swan Event: The one catastrophic event that none of the meticulously planned scenarios even remotely covered, forcing a completely improvised response.

What this role does not give you

Instant Gratification: Most of your work is preventative; you won't see immediate 'wins' every day.
Predictable Routine: Crises are, by definition, unpredictable. Your plans will often be disrupted.
Direct Operational Control: You're an influencer, not a commander (unless we're 'invoking the plan').

8Who you work with

This role directly impacts the organisation's ability to maintain critical operations, protect its assets, and safeguard its reputation during disruptive events. It ensures compliance with regulatory requirements and minimises financial and operational losses associated with unforeseen incidents. Essentially, you're the last line of defence for business continuity.

Inside the business

Executive Leadership Team (ELT)
Heads of Business Units (e.g., Operations, IT, Finance, HR)
Legal & Regulatory Affairs
Internal Audit
Information Security Team

Outside the business

Key Suppliers & Vendors
Regulatory Bodies (e.g., FCA, HSE)
Emergency Services
External Auditors
Insurance Providers

9What you need before you start

Not a wish list. The things you would be expected to already have.

Extensive experience (10+ years) in a dedicated business continuity, crisis management, or operational resilience role, ideally within a regulated industry.
Proven track record of leading complex resilience programmes, not just executing tasks.
Demonstrable experience managing a team of resilience professionals, including hiring, performance management, and career development.
Budget management experience, specifically for resilience-related investments (e.g., software, training, external consultants).
Strong understanding of enterprise risk management principles and how resilience fits into the broader risk framework.
Experience presenting to and influencing senior leadership and Board-level committees.

10What to practise next

Where the job is going, and what to do about it starting this week.

Advanced BCM/GRC Platform Configuration & Integration

Critical within 12 months. As our resilience programme matures, we'll need to squeeze every last drop of value from our platforms. This means deeper customisation, more complex integrations with other enterprise systems (e.g., HRIS, ERP), and using advanced analytics features to drive insights.

API Integration for Data Exchange · Advanced Workflow Automation · Custom Reporting & Dashboard Development · Data Governance within Resilience Platforms

This quarter: Attend advanced training courses or user conferences for our primary BCM/GRC platform.
Next 6 months: Lead a project to integrate our BCM platform with one other critical enterprise system (e.g., HRIS for contact data).
Month 9: Design and implement a new set of executive-level dashboards that provide a holistic view of our resilience posture.
Month 12: Mentor your team on advanced platform features, empowering them to take on more complex configuration tasks.

Quick win: Explore the advanced features of your current BCM platform. Many offer sandbox environments where you can experiment with integrations and customisation without impacting live data.

11Staying current once you are in

What people here do to keep up

Regularly attend industry conferences and webinars (e.g., BCI World, DRI Conferences) to stay current on emerging threats and best practices.
Actively participate in industry working groups or forums to share knowledge and influence the resilience landscape.
Undertake continuous learning in areas like cyber security, supply chain management, and AI ethics, as these directly impact resilience.
Seek out leadership and management training to further develop your team-building and influence skills.

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

AI-Driven Predictive Risk Analytics

Critical within 12 months. The sheer volume of threat intelligence and operational data means human analysis alone can't keep up. AI will move us from reactive to truly predictive resilience, spotting patterns and anomalies that indicate emerging risks before they manifest.

Machine Learning for Anomaly Detection
Natural Language Processing (NLP) for Threat Intelligence
Probabilistic Risk Modelling
Ethical AI & Bias in Risk Models

Quantum-Safe Resilience Planning

Important within 24-36 months. As quantum computing advances, current encryption methods will become vulnerable, posing a massive threat to data security and operational integrity. We need to start planning for this now.

Post-Quantum Cryptography (PQC)
Quantum Risk Assessment
Migration Strategies
Supply Chain Quantum Risk

13What you’ll use

What you’ll use

Skills this role draws on

Technical

ISO 22301 (BCMS)
Business Impact Analysis (BIA)
Threat & Risk Assessment (TRA)
Scenario-Based Exercise Design & Facilitation
Incident Command System (ICS) / Crisis Management Frameworks
Root Cause Analysis (RCA) & After Action Reporting (AAR)

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

1
Lead Resilience Strategist (Internal L4)
3-5 years as an L4
Skills to master
- At L4, you'd have mastered designing complex, cross-functional resilience strategies and acted as a top subject matter expert. To move to Manager, you'd need to add team leadership, budget management, and executive reporting to your skillset.
You're ready to move on when
- Successfully led multiple complex resilience projects from inception to completion.
- Consistently mentored junior team members and demonstrated informal leadership.
- Taken initiative to present strategic recommendations to senior management.
- Managed a significant project budget (£50K+) and delivered within scope.
2
Resilience Manager (from another organisation)
Direct entry (0-3 months onboarding)
Skills to master
- You'd bring existing managerial experience, but you'd need to quickly get up to speed on our specific industry regulations, internal processes, and organisational culture. Understanding our existing tech stack (Fusion, ServiceNow) would be key.
You're ready to move on when
- Proven track record of managing a resilience team and programme in a similar-sized organisation.
- Demonstrated ability to quickly adapt to new environments and build relationships.
- Strong understanding of our industry's specific resilience challenges and regulatory landscape.
- Successfully onboarded and integrated into a new leadership team.
3
Senior Manager, Risk Management (Internal Lateral)
2-4 years in a senior risk role
Skills to master
- You'd bring a strong understanding of enterprise risk, but you'd need to specialise in the tactical and strategic elements of business continuity, crisis management, and incident response. Deep diving into ISO 22301 and exercise design would be crucial.
You're ready to move on when
- Demonstrated expertise in enterprise risk assessment and mitigation.
- Expressed a clear interest and aptitude for business continuity and crisis management.
- Successfully led cross-functional projects with significant operational impact.
- Completed relevant certifications (e.g., CBCP, MBCI) to bridge knowledge gaps.

15Where this role leads

The long view: This work can lead to leading larger teams, specialising as a risk expert, or moving into broader operations leadership.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how Resilience Manager is actually changing.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from organisational Resilience, worked against Resilience Manager.

organisational Resilience Level 6

Applied to your work in Resilience Manager

This unit aims to provide learners with a comprehensive understanding of Organisational Resilience capability and its key components, including adaptability, agility, and robustness. Learners will explore the principles of criticality management, impact analysis, and the role of human factors in organisational resilience, enabling them to mitigate the effects of disruptions.

How the thinking builds

1 Remember
2 Understand
3 Apply
4 Analyse
5 Evaluate
6 Create

An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

Start my Resilience Manager plan, free

See Your Progress Grow Illustration

Resilience Manager

ISO 22301 (BCMS)
Business Impact Analysis (BIA)
Threat & Risk Assessment (TRA)
Scenario-Based Exercise Design & Facilitation
Incident Command System (ICS) / Crisis Management Frameworks
Root Cause Analysis (RCA) & After Action Reporting (AAR)

This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

16The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

Resilience Manager is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

Director of Enterprise Resilience (L6)
3-5 years as Resilience Manager

From managing a function to shaping business unit strategy and governing resilience across multiple units or geographies.
- Enterprise-wide risk integration (embedding resilience into broader risk frameworks).
- Geopolitical risk assessment (understanding global events and their local impact).
- M&A due diligence (assessing resilience posture of potential acquisitions).
- Advanced regulatory engagement (proactive dialogue with supervisory bodies).

Working with AI on the job

Working with AI

Where AI is starting to help

Let's be real, managing organisational resilience is a massive undertaking. From tracking threats to drafting scenarios and coordinating communications, there's a mountain of work. What if you could offload some of that heavy lifting to smart AI tools, freeing you up to focus on strategy and leadership?

We're not talking about AI replacing your critical judgment, but rather augmenting your capabilities. Imagine having an intelligent assistant that handles the grunt work, allowing you and your team to be more proactive, more strategic, and ultimately, more effective in protecting the business. Here's how AI can genuinely transform your day-to-day as Resilience Manager:

Threat Intelligence Radar

Use AI to continuously scan global news, social media, weather data, and supply chain alerts for keywords relevant to your locations and vendors. It automatically generates a prioritised daily threat brief, flagging potential issues before they become full-blown crises. No more manually sifting through dozens of feeds.

Systemic Weakness Detector

Feed 3-5 years of After Action Reports (AARs) and incident logs into an LLM. Ask it to identify recurring themes, hidden patterns, and systemic root causes across seemingly unrelated events that human analysis might miss. This helps you target your mitigation efforts where they'll have the biggest impact.

Tabletop Scenario Drafter

Stuck for ideas for your next exercise? Use a GenAI prompt like: 'Create a realistic tabletop exercise scenario for a mid-sized pharmaceutical manufacturing plant in Ireland. The scenario should involve a supply chain failure of a critical raw material from China and a simultaneous local utility outage.' Get a solid first draft in minutes, not hours.

Crisis Comms First Draft

During an incident, every second counts. AI can draft initial crisis communications for different stakeholders (employees, customers, regulators) based on the incident type. It pulls from pre-approved templates and inserts key details, providing a 90% complete message ready for your human review and approval, drastically cutting down response time.

Common questions

How do you become a Resilience Manager?

Common routes in include Lead Resilience Strategist (Internal L4) (3-5 years as an L4), Resilience Manager (from another organisation) (Direct entry (0-3 months onboarding)) and Senior Manager, Risk Management (Internal Lateral) (2-4 years in a senior risk role). Times vary with prior experience.

Where can a Resilience Manager progress to?

This role can lead on to Director of Enterprise Resilience (3-5 years as Resilience Manager), depending on the skills you build.

What new skills matter most for a Resilience Manager?

Increasingly, AI-Driven Predictive Risk Analytics and Quantum-Safe Resilience Planning. These are the skills our record of this role lists as growing.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my Resilience Manager plan, free What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.

Resilience Manager

Where should we send it?

Two short quizzes about you

Will AI change your work as a Resilience Manager?

What's rising in its place

AI-Driven Predictive Risk Analytics

Quantum-Safe Resilience Planning

Skills this role draws on

Technical

How you actually get there, here

Lead Resilience Strategist (Internal L4)