Cyber Security Lead

Cyber Resilience Lead

To act as the senior bridge between the Product Owner and 3rd party delivery partner to drive the formalisation, socialisation, and embedding of Digital Resilience Strategy and Digital Resilience Target Operating Model (DRTOM). The Cyber resilience engagement lead will shape and deliver the stakeholder engagement strategy, translate supplier outputs into clear, executive ready insights, and orchestrate the governance integration and operating rhythm that enables measurable improvements to Thames Water's digital resilience posture.

Key Responsibilities:

Strategy & TOM Enablement

Translate Cyber Resilience 3rd party outputs into ready exec summaries, playbacks, and decision papers.
Co ordinate and co author (with Product Owner & supplier) the Digital Resilience Strategy, linking to Business Resilience and Digital Strategy execution.
Maintain traceability from DRTOM to operating imperatives and regulatory requirements.
Drive monthly governance reviews, roadmap alignment, and portfolio execution inputs.

Governance Integration & Operating Rhythm

Stand up and run the Digital Resilience Steering Committee (cadence, papers, actions, templates).
Formalise roles, RACI, and escalation protocols spanning IRR, third party, data integrity, IT/OT, and supplier functions.
Define and land resilience KPIs & dashboards (readiness, recovery confidence, supplier risk, test results, regulatory alignment).

Digital Resilience Op-Model Factory (DROF)

Coordinate critical gap identification using Cyber resilience current state findings and dependency maps.
Orchestrate industrialised remediation sprints (backups & recovery validation, configuration hardening, CMDB cleansing).
Set the factory cadence, templates, tooling, action trackers, and evidence packs for audit/regulatory use.
Plan and facilitate scenario based resilience testing and table top exercises (design & facilitation; technical execution by TW teams).