United Kingdom · Compliance, quality and safety · Mid-Level (2-5 years)

Resilience Manager

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

Start my Resilience Manager plan, free

Free to start: a plan built for this role, and a Future Fluency module to try first. No card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Upskilling a team in this role? Talk to us

  • Experience bandMid-Level (2-5 years)
  • Direct reportsNo direct reports
  • Reports toSenior Resilience Manager
  • UK framework levelUsually a coordinator, or early in a professional job

Also advertised as Business Continuity Specialist · Disaster Recovery Coordinator · Operational Resilience Analyst

Built on 43,079 real UK job descriptions we analysed · grounded in qualifications employers recognise

1From this job to a course

The qualifications matched to this job

ProQual Level 4 NVQ Diploma in Management ProQual Awarding Body · Level 4 · covers 5 of 6 standards
OCNLR Level 4 Certificate in Business Administration OCN London · Level 4 · covers 3 of 6 standards
OCNLR Level 4 Diploma in Business Administration OCN London · Level 4 · covers 2 of 6 standards
Pearson Edexcel Level 4 NVQ Diploma in Business Administration Pearson Education Ltd · Level 4 · covers 2 of 6 standards
SFEDI Awards Level 3 Certificate in Business Innovation, Sustainability and Growth SFEDI Enterprises Ltd. T/A SFEDI Awards · Level 3 · covers 2 of 6 standards
SFEDI Awards Level 3 Award in Business Innovation, Sustainability and Growth SFEDI Enterprises Ltd. T/A SFEDI Awards · Level 3 · covers 2 of 6 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

Implement and maintain business continuity plans and processes ProQual Level 4 NVQ Diploma in Management
Business Continuity Planning OCNLR Level 4 Certificate in Business Administration
Understand Business Resilience SFEDI Awards Level 3 Certificate in Business Innovation, Sustainability and Growth

The future skills this job leans on

AI Fluency working with AI as a thinking partner
Data Fluency turning numbers into a decision
AI Governance Fluency using AI responsibly
Systems Fluency seeing the whole picture
Trust Fluency keeping the digital world safe
Your Plan Illustration

Built for Resilience Manager

3 units that map to this job, from the qualifications that cover it.

  1. Implement and maintain business continuity plans and processes ProQual Awarding Body · covers 5 of 6 standards Level 4
  2. Business Continuity Planning OCN London · covers 3 of 6 standards Level 4
  3. Understand Business Resilience SFEDI Enterprises Ltd. T/A SFEDI Awards · covers 2 of 6 standards Level 3
These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as a Resilience Manager?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

  • Data Storytelling for Resilience
  • Basic Prompt Engineering for Resilience Tasks
Why each one is rising

The future skills this job leans on

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your Resilience Manager plan as you set up, starting with a Future Fluency module on using AI in your job. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

3What this role really is

A resilience manager makes sure an organisation can keep going when things go wrong. The work involves identifying what could disrupt operations and building plans to recover quickly, covering everything from power cuts to supply chain problems.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

Fusion Framework System / Castellan / Noggin (BCM Platforms) Intermediate

You'll use this daily to update BIA data, manage contact lists, track plan versions, and run pre-built reports. You'll be executing tasks within the existing plan structures, making sure the data is always fresh.

ServiceNow GRC / SAI360 / Enablon (GRC/EHS Systems) Basic

You'll use this to log minor incidents, track corrective actions (CAPAs) related to resilience findings, and pull standard compliance reports when needed. You'll understand where the resilience data fits in.

Everbridge / OnSolve / xMatters (Emergency Comms) Intermediate

During exercises or minor incidents, you'll be able to launch pre-approved communication templates and manage incident response groups. You'll know how to get the right message to the right people quickly.

Power BI / Tableau / Advanced Excel (Power Query) Intermediate

You'll refresh existing resilience dashboards, manipulate BIA data in Excel (using Power Query for cleaning), and create basic charts to support your reports or presentations. You'll be able to get the data to tell a story.

Confluence / SharePoint / MS Teams (Collaboration & Docs) Intermediate

You'll maintain team sites, update playbooks and procedures in Confluence or SharePoint, and organise incident channels in Teams during exercises or real events. Keeping our knowledge base tidy is key.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choiceComing in Where you are nowThe step above
Business Impact Analysis (BIA) Scope & Methodology Follows pre-defined scope and methodology; escalates any proposed changes. Chooses appropriate methodology for routine BIAs within established guidelines; consults manager on novel situations or significant scope changes. Defines BIA scope and methodology for complex business units; makes recommendations for programme-wide improvements.
Plan Updates & Content Changes Updates plan content based on clear instructions; all changes reviewed by manager. Independently updates and maintains owned plans, ensuring compliance with standards; escalates significant content changes or policy deviations. Approves content changes for multiple plans; designs new plan templates and structures.
Exercise Scenario Design Assists with data gathering for scenarios; follows instructions for exercise logistics. Co-designs and co-facilitates tabletop exercise scenarios for specific business units; adapts scenarios based on participant feedback. Designs and leads complex, cross-functional exercises; develops new exercise methodologies.

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Business Impact Analysis (BIA) Completion Rate
Percentage of assigned departmental BIAs completed and reviewed within the annual cycle.
Target · 95%+ of assigned BIAs completed on time

You've got 10 BIAs assigned for Q2; you complete 9 and get them signed off. That's 90% and means you'll need to chase up that last one pretty sharpish.

Plan Refresh & Update Timeliness
Percentage of owned business continuity plans (BCPs) and recovery procedures updated and approved by their owners by the deadline.
Target · 100% of owned plans updated by due date

The IT Disaster Recovery Plan for System X was due for review on 15 March. You chased the IT team, got their updates, and submitted it for approval on 14 March. Job done.

Exercise Action Item Closure Rate
Percentage of corrective actions identified from exercises (that you're tracking) closed within the agreed timeframe.
Target · 85%+ of assigned actions closed within 90 days

After the Q1 tabletop, three actions were assigned to your business unit. You made sure two were sorted within 90 days, but one is still outstanding. That's 66% for those specific actions, so you'd need to push harder on the last one.

Incident Documentation Quality
Accuracy and completeness of incident reports and After Action Reports (AARs) for minor incidents you're involved in.
Target · Zero critical omissions or factual errors in reports

You helped draft the AAR for a minor system outage. It clearly detailed the timeline, impact, actions taken, and lessons learned, with no one coming back to say you missed a key detail or got a time wrong.

Stakeholder Engagement & Buy-in
How effectively you get business unit leaders to engage with resilience planning, not just see it as a chore.
  • Departmental heads proactively provide BIA updates without excessive chasing. They show up to exercise planning meetings prepared. They ask questions about resilience, rather than just waiting to be told what to do. You'll get feedback like, 'They actually made the BIA process quite painless this year.'
Clarity of Communication
Your ability to explain complex resilience concepts and risks in plain English to non-technical audiences.
  • Business unit managers can articulate their RTOs and RPOs. Exercise participants understand the scenario and their roles without needing constant clarification. Your reports are easy to read and don't get bogged down in jargon. People will tell you, 'Thanks, that actually made sense!'
Proactive Issue Identification
Your knack for spotting potential resilience gaps or single points of failure before they become a problem.
  • You flag a dependency between two systems that wasn't obvious in the BIA. You notice a change in a supplier contract that could impact our recovery. You bring potential risks to your manager's attention with a proposed solution, rather than waiting for them to be discovered in an audit.
Exercise Co-Facilitation Effectiveness
Your contribution to running smooth, engaging, and insightful resilience exercises.
  • Participants feel the exercise was valuable and well-structured. You handle unexpected questions or challenges during a tabletop with composure. Your input helps guide discussions to meaningful outcomes and identifies real gaps, rather than just going through the motions.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy
Problem Solving & Prevention

You get a real kick out of dissecting a complex process to find its weak points, then figuring out how to shore them up. You enjoy the challenge of anticipating what could go wrong and putting measures in place to stop it.

Spending an afternoon mapping out a supplier dependency chain, spotting a single point of failure, and then working with the procurement team to find an alternative. That's a good day for you.

Making a Tangible Impact

You want to see your work actually make a difference. Knowing that a plan you helped build or an exercise you co-facilitated could save the company from a major incident is genuinely satisfying.

After a small incident, seeing the team use the communication plan you helped refine, and knowing your efforts helped them respond quickly and effectively. That's a win.

Learning & Development

The world of risks and threats is always changing, and you're keen to keep up. You enjoy learning about new threats, new technologies, and new ways to make the organisation more robust.

Researching a new cyber threat that could impact our operations, then figuring out how to incorporate it into our next tabletop exercise scenario. Always learning.

What frustrates people
  • Chasing busy departmental heads for BIA updates, only for them to say 'it hasn't changed' when you know it has.
  • Discovering during an exercise that a critical contact list has old phone numbers or email addresses.
  • Getting pushback on simple recommendations because 'that's how we've always done it'.
  • Feeling like the 'prophet of doom' because your job is to think about all the bad things that could happen.
  • The constant battle for budget for preparedness activities against departments with clearer, more immediate ROI.
What this role does not give you
  • A predictable, unchanging daily routine – priorities can shift quickly based on new threats or incidents.
  • Direct authority over most of the people you need to influence – it's all about persuasion and collaboration.
  • Immediate, tangible 'wins' every day – much of your work is about prevention, which is hard to quantify until it's needed.
  • A quiet, solitary work environment – you'll be talking to people constantly, often about uncomfortable topics.

8Who you work with

You'll directly contribute to the organisation's ability to withstand and recover from disruptions, ensuring business continuity and regulatory compliance. Your work helps protect revenue, maintain customer trust, and safeguard our reputation during challenging times.

Inside the business
  • Departmental Heads (e.g., Operations, IT, Finance)
  • Compliance Team
  • Risk Management Team
  • Health & Safety Officers
  • Internal Audit
Outside the business
  • Key Suppliers (for BIA input)
  • External Auditors (for compliance checks)

9What you need before you start

Not a wish list. The things you would be expected to already have.

  • At least 2 years of experience in business continuity, disaster recovery, or operational risk management.
  • Proven ability to conduct interviews and gather information from diverse stakeholders.
  • Demonstrable experience in maintaining documentation and managing data accurately.
  • A solid grasp of Microsoft Office Suite, especially Excel for data manipulation and PowerPoint for presentations.
  • An understanding of basic project management principles (even if informal).

10What to practise next

Where the job is going, and what to do about it starting this week.

Advanced BCM Platform Configuration

As our resilience programme matures, we'll want to get more out of our BCM platform (like Fusion Framework). This means moving beyond basic data entry to understanding how to configure workflows, customise dashboards, and potentially integrate with other systems. This will become important within 12-18 months.

Customising BIA questionnaires and templates withi · Designing simple automated workflows for plan revi · Building custom reports and dashboards for specifi · Understanding user roles and permissions within th · Basic data migration and integration concepts

  • This month: Ask your Senior Resilience Manager for access to any platform training modules or documentation.
  • Month 2: Shadow a more experienced user or administrator to see how they configure the platform.
  • Month 3: Propose a small customisation or report within the platform that would benefit your assigned business units.
  • Month 4: Take ownership of a specific platform configuration task under guidance.

Quick win: Familiarise yourself with all the existing reports and dashboards in our BCM platform. Understand what data they're pulling and how they're built.

Supply Chain Resilience Analytics

Supply chain disruptions are a constant threat, and understanding the resilience of our extended enterprise is crucial. This means moving beyond just identifying critical suppliers to analysing their vulnerabilities and building more robust mitigation strategies. This will be important within 18-24 months.

Mapping multi-tier supply chains · Identifying single points of failure within the su · Assessing supplier resilience maturity · Developing alternative supplier strategies · Using data to quantify supply chain risk

  • This month: Read industry reports on supply chain resilience and recent disruptions.
  • Month 2: Work with our Procurement team to understand our key suppliers and their contracts.
  • Month 3: Propose a small project to map out the dependencies for one critical raw material or service.
  • Month 4: Research tools or methodologies for supply chain risk assessment.

Quick win: Identify the top 3-5 most critical suppliers for your assigned business units and understand what our backup plans are if they fail.

11Staying current once you are in

What people here do to keep up
  • Attending industry webinars and conferences on operational resilience and emerging threats.
  • Joining professional bodies like the BCI or DRI and participating in local chapter meetings.
  • Reading industry publications and thought leadership pieces to stay current on best practices.
  • Seeking out internal mentorship opportunities with senior colleagues in resilience or risk management.
  • Taking online courses on specific tools or methodologies that enhance your technical skills (e.g., advanced Excel for data analysis).

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

Data Storytelling for Resilience

We're drowning in data, but what really matters is turning that data into clear, compelling stories that convince busy leaders to act. Simply presenting numbers isn't enough; you need to show the 'so what?' and the 'why now?'. This is driven by the increasing demand for data-driven decision-making and the need to justify resilience investments.

  • Identifying key insights from resilience data (e.g
  • Structuring narratives that highlight risks and mi
  • Using visualisations effectively to convey complex
  • Tailoring the message to different audiences (e.g.
  • Connecting data points to real-world business impa

Basic Prompt Engineering for Resilience Tasks

Generative AI is here, and it's already changing how we gather information, draft documents, and even design exercises. People who can effectively 'talk' to AI models will be significantly more productive. This is critical within 12 months; those who don't embrace it will be left behind.

  • Understanding how to phrase clear, unambiguous pro
  • Iterative prompting: refining your requests to get
  • Ethical considerations: knowing when NOT to use AI
  • Output validation: always checking AI-generated co
  • Using AI for summarisation, idea generation, and f

13What you’ll use

What you’ll use

Skills this role draws on

Technical

  • ISO 22301 (BCMS)
  • Business Impact Analysis (BIA)
  • Threat & Risk Assessment (TRA)
  • Scenario-Based Exercise Design & Co-Facilitation
  • Incident Command System (ICS) / Crisis Management Frameworks
  • Root Cause Analysis (RCA) & After Action Reporting (AAR)

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

  1. 1

    Resilience Analyst (L1) to Resilience Manager (L2)

    2-3 years

    Skills to master

    • Moving from executing tasks under guidance to independently owning specific processes, conducting BIAs without constant supervision, and confidently co-facilitating exercises. You'll need to develop stronger communication with business stakeholders.

    You're ready to move on when

    • Consistently delivers accurate BIA data and plan updates on time.
    • Proactively identifies minor issues and proposes solutions.
    • Demonstrates a solid understanding of our core resilience processes.
    • Can clearly explain basic resilience concepts to non-experts.
  2. 2

    Risk Analyst to Resilience Manager (L2)

    3-4 years

    Skills to master

    • Translating broad risk management knowledge into specific business continuity and operational resilience practices. This means getting hands-on with BIAs, plan development, and exercise design, which might be new. You'll need to learn the 'how-to' of recovery.

    You're ready to move on when

    • Strong analytical skills in identifying and assessing risks.
    • Good understanding of business processes and their potential vulnerabilities.
    • Eagerness to learn and apply specific resilience methodologies.
    • Ability to work collaboratively across different departments.
  3. 3

    Compliance Officer to Resilience Manager (L2)

    3-5 years

    Skills to master

    • Shifting from ensuring adherence to rules to actively building and testing the systems that ensure continuity. This involves a more operational focus on recovery strategies and less on policy interpretation. You'll need to get comfortable with the 'what if' scenarios.

    You're ready to move on when

    • Meticulous attention to detail and understanding of regulatory requirements.
    • Ability to interpret and apply guidelines to practical scenarios.
    • Strong organisational skills for managing documentation and processes.
    • A proactive mindset towards identifying potential failures, not just current non-compliance.

15Where this role leads

The long view: This work can lead to broader risk management roles, senior resilience roles overseeing a wider function, or director-level roles setting resilience strategy across an organisation.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how Resilience Manager is actually changing.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Implement and maintain business continuity plans and processes, worked against Resilience Manager.

Implement and maintain business continuity plans and processes Level 4

Applied to your work in Resilience Manager

The objective of this unit is to equip learners with the skills and knowledge to plan, implement, and maintain business continuity plans and processes. Learners will be able to identify potential risks, develop response procedures, and ensure staff are adequately trained. Furthermore, they will learn how to regularly test, review, and update plans to ensure their ongoing effectiveness.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

See Your Progress Grow Illustration
Resilience Manager
  • ISO 22301 (BCMS)
  • Business Impact Analysis (BIA)
  • Threat & Risk Assessment (TRA)
  • Scenario-Based Exercise Design & Co-Facilitation
  • Incident Command System (ICS) / Crisis Management Frameworks
  • Root Cause Analysis (RCA) & After Action Reporting (AAR)
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

16The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

Resilience Manager is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

  1. Senior Resilience Manager (L3)

    3-5 years

    You'll move from owning specific processes to leading major components of the entire resilience programme. This means managing more complex workstreams, mentoring junior staff, and making more significant technical decisions.

    • Designing and implementing new resilience frameworks or methodologies
    • Leading large-scale, cross-functional exercises end-to-end
    • Developing and managing programme-level metrics and reporting
    • Advanced use of BCM platforms for configuration and customisation
  2. Specialist Resilience Role (e.g., Cyber Resilience Specialist, Supply Chain Resilience Lead)

    3-5 years

    Instead of general programme management, you'd dive deep into a specific area of resilience, becoming the go-to expert for that domain. This means highly specialised technical knowledge and leading initiatives within that niche.

    • Implementing specific cyber recovery strategies (e.g., immutable backups, incident response playbooks)
    • Conducting advanced supply chain risk assessments and designing multi-tier mitigation strategies
    • Integrating resilience with specific security frameworks (e.g., NIST, ISO 27001)
    • Developing and testing highly specialised recovery procedures
Working with AI on the job

Working with AI

Where AI is starting to help

Let's be honest, parts of resilience management can be a bit repetitive, can't they? Chasing data, drafting reports, setting up scenarios – it all takes time. But what if you could offload some of that grunt work to AI? We're not talking about replacing you, but giving you a super-powered assistant.

Imagine having more time to actually strategise, build relationships, and dig into the real complexities of our operational resilience. That's what AI can do for a Resilience Manager. You'll still be the brains of the operation, but AI will handle the heavy lifting of information gathering, initial drafting, and pattern spotting. It's about working smarter, not just harder.

Threat Intelligence Radar

Use AI to continuously scan global news feeds, social media, weather reports, and supply chain alerts. It'll automatically flag and prioritise threats relevant to our locations, key suppliers, and operations. You'll get a concise, daily threat brief, saving you hours of manual searching. Think of it as your early warning system.

Systemic Weakness Detector

Feed years of After Action Reports (AARs), incident logs, and BIA data into an AI. Ask it to identify recurring themes, hidden dependencies, and systemic root causes across seemingly unrelated events. It can spot patterns and vulnerabilities that even the most meticulous human analysis might miss, giving you deeper insights for mitigation.

Tabletop Scenario Drafter

Need a realistic tabletop exercise scenario? Use GenAI. Give it a prompt like: 'Create a scenario for a mid-sized financial services firm in London, involving a ransomware attack and a simultaneous public transport strike.' It'll draft a detailed scenario, complete with injects and discussion points, giving you a massive head start.

Crisis Comms First Draft

During an incident, every minute counts for communications. AI can draft initial crisis messages for different audiences (employees, customers, regulators) based on the incident type. It pulls from pre-approved templates and inserts key details, providing a 90% complete message ready for your expert review and final polish. No more staring at a blank screen under pressure.

Common questions

Common questions

How do you become a Resilience Manager?

Common routes in include Resilience Analyst to Resilience Manager (2-3 years), Risk Analyst to Resilience Manager (3-4 years) and Compliance Officer to Resilience Manager (3-5 years). Times vary with prior experience.

Where can a Resilience Manager progress to?

This role can lead on to Senior Resilience Manager (3-5 years) and Specialist Resilience Role (e.g., Cyber Resilience Specialist, Supply Chain Resilience Lead) (3-5 years), depending on the skills you build.

What new skills matter most for a Resilience Manager?

Increasingly, Data Storytelling for Resilience and Basic Prompt Engineering for Resilience Tasks. These are the skills our record of this role lists as growing.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

17Where to go from here

Other roles at Level 3

Same depth of qualification, different job. Useful if the work appeals but this particular role does not.

More jobs in compliance, quality and safety

Stay in the field you know and move sideways rather than up.

If you leave this industry

The skills built as a resilience manager transfer well to other fields. They can lead to roles in risk management, operational improvement, or programme management across many industries. Most organisations need some form of resilience planning.

This role profile is © 2026 Growth Engineering Technologies Ltd. Built from UK occupational standards and regulated qualification data, and written for Zavmo.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my Resilience Manager plan, free What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.