Job Description

OVERVIEW

The Maples Group is a standard bearer in financial and legal services, trusted by many of the world’s largest hedge fund managers, private equity firms and international corporations.

Our distinction flows from our carefully curated team: 2,500+ professionals characterised by tenacity, ethics and exacting excellence. Operating in key financial centres across the Americas, Asia, Europe and the Middle East, our international presence offers a unique springboard for career development and cross-cultural immersion. Our side-by-side financial and legal services are similarly ripe for interdisciplinary learning and growth.

The Maples Group looks to add a London or Dublin based Senior Manager, Operational Resilience to our team and invites eager and qualified candidates to apply. We are committed to diversity, inclusion and equality of opportunity as we attract, retain and develop world-class talent.

Who We Seek

Our merit-based culture suits professionals in pursuit of boundless careers and lives. Beyond their acumen, team members are collaborative and conscientious, bringing a healthy sense of drive and purpose to each interaction and to all aspects of their work.

About the Role

Own the governance, oversight, and regulatory reporting for the firm’s Operational Resilience programme across the Maples group operating jurisdictions. Drive strategic planning and tactical implementation for global operational resilience. Support compliance with regulations, standards, and frameworks such as the Digital Operational Resilience Act (DORA), and related ISO standards. Establish and maintain policies, standards, and control frameworks; deliver practical solutions to protect the business, provide high-quality business level advisory to senior leadership; and embed a culture of resilience across the enterprise and supply chain. Collaborate with the Business Continuity, Crisis Management, Information Security, and broader Risk, Compliance and Legal functions as well as impacted business areas.

Key responsibilities include:

1) Governance, Framework & Policy

• Lead the design, implementation, and maintenance of the Operational Resilience Framework, policies, standards, and minimum control requirements, aligned to DORA and other such frameworks.
• Maintain a clear RACI model, linking operational resilience responsibilities to the enterprise risk, IT risk, cyber, BCM, crisis management, and third‑party risk management frameworks.
• Ensure resilience requirements are embedded in change/governance processes (e.g., product change, major transformation, cloud migration).

2) Regulatory Compliance & Readiness

• Interpret and operationalize regulatory obligations across DORA pillars (ICT risk management, incident management & reporting, digital operational resilience testing, ICT third‑party risk management, information sharing) and general operational resilience principles (IBS, impact tolerances, mapping, scenario testing, self‑assessment).
• Maintain an Operational Resilience Self‑Assessment and DORA body‑of‑evidence (policies, procedures, mappings, registers, test results); to be available for regulatory inspection.
• Coordinate regulatory submissions with Compliance and impacted boards, requests for information, and responses to regulatory findings; track remediation to closure.

3) MI, Metrics & Board Reporting

• Design and maintain MI dashboards and KRI/KPI suites covering incident trends, resilience maturity, testing performance, impact tolerance status, third‑party resilience, remediation progress, and audit/regulatory actions.
• Produce monthly/quarterly reports for senior management, governance committees, and the Board; ensure accuracy, timeliness, and clear narrative.

4) Mapping, Business Services & Impact Tolerances

• Facilitate identification and mapping of Important Business Services and critical/important functions, covering people, process, technology, data, facilities, and third‑party dependencies.
• Coordinate the definition, approval, and periodic review of impact tolerances, including measurement approach, scenarios, and escalation criteria.

5) Scenario Testing & Assurance

• Plan and execute the resilience testing lifecycle (tabletop, end‑to‑end, third‑party disruption simulations, ICT/cyber outage scenarios), with risk‑based scope and control objectives.
• Maintain test evidence, findings, risk acceptance and remediation tracking, ensuring lessons learned inform policy, standards, and future testing.
• Provide second‑line challenge and thematic reviews; partner with Compliance for risk‑based assurance; and liaise with Internal Audit on their independent testing requirements

6) Incident Management & Post‑Incident Learning

• Oversee incident classification and regulatory notification workflows in line with DORA requirements and defined timeframes.
• Coordinate root cause analysis, lessons learned, trend analysis, and control enhancements; ensure recurring issues are addressed through targeted remediation and governance follow‑up.

7) ICT Third‑Party Resilience & Concentration Risk

• Partner with TPRM to maintain the register of ICT third‑party providers, ensure minimum contractual clauses, monitoring, testing participation, and exit/transition plans.
• Assess concentration risk and systemic dependency exposures; support control design for multi‑vendor/geo diversification and resilience attestation.

8) Stakeholder Engagement & Culture

• Chair cross‑functional resilience working groups; drive shared accountability across IT, Risk, Cyber, BCM, Compliance, Procurement, and Business Units.
• Design and deliver targeted training and awareness (by role and function), including playbooks, decision rights, and executive exercises.

9) Tools, Data & Taxonomies

• Oversee MI data quality, taxonomy alignment (incidents, services/functions, impacts, dependencies), and effective use of GRC/IRM platforms (e.g. ServiceNow) for evidence and reporting.

10) Deliverables & Success Measures

• Approved Operational Resilience Framework, policies, and standards aligned to DORA.
• Up‑to‑date mapping (critical functions), impact tolerances, and third‑party registers.
• Annual Self‑Assessment and complete DORA body‑of‑evidence.
• Executed risk‑based testing plan with timely closure of findings.
• Regulatory engagements with no material findings or overdue actions; improved audit outcomes.
• Clear, consistent MI and Board reporting with measurable resilience improvements.

EXPERIENCE

What You Bring

In addition to indisputably high ethical standards and autonomy, the ideal candidate possesses the following:

• 7–10+ years in Operational Resilience, Operational Risk, Business Continuity, IT/Cyber Risk, or Compliance within financial services (banking, payments, market infrastructure, asset/wealth).
• Demonstrable experience implementing DORA requirements and related (IBS, impact tolerances, scenario testing, self‑assessment).
• Strong background coordinating major incidents, regulatory interactions, and cross‑functional programmes.
• Knowledge
• Deep familiarity with DORA (ICT risk management, incident reporting, digital operational resilience testing, ICT TPRM, information sharing).
• Understanding of BCMS (ISO 22301), cyber incident response, third‑party risk, cloud resilience, and data centre/telecom dependency risk.

Skills

• Exceptional written and verbal communication; concise executive and Board reporting.
• Advanced analytical and MI dashboard capabilities; strong problem‑solving and project/program management.
• Ability to influence and lead in matrixed environments; credible second‑line challenge.
• Comfortable with GRC/IRM tools (e.g. ServiceNow), data analysis, and documentation control.

Qualifications (Preferred)

• Degree in Risk Management, Information Security, Business, or related field.
• Professional certifications: ISO 22301 Lead Implementer/Auditor, CBCP/MBCI, CRISC/CISM/CISSP, ITIL, PMP/PRINCE2.

BENEFITS & REWARDS

The most enduring professional relationships are reciprocal relationships. The Maples Group prioritises employee health and wellbeing. Depending on your location, we offer a range of benefits, including:

• Comprehensive health coverage (medical, dental and optical)
• Competitive vacation packages
• Educational assistance and professional development programmes
• Savings or pension plan
• Life insurance
• Travel insurance
• Global mental wellness programme
• Sports clubs and social events

ABOUT MAPLES GROUP

Over five decades, the Maples Group has grown from modest beginnings into one of the world's preeminent professional services firms, offering specialised fiduciary, fund administration, regulatory and compliance, entity formation and management and legal services on the laws of the British Virgin Islands, the Cayman Islands, Ireland, Jersey and Luxembourg.

You can learn more about the Maples Group on our corporate website. Experience our culture and our people on our Careers Page or on LinkedIn.

Please note that it is the Maples Group standard policy to undertake various background screening checks on all applicants to whom a conditional job offer is made. Except for roles based in the Republic of Ireland, the background checks will include criminal records checks when a conditional job offer is made. If you have a criminal record, it does not mean that your job offer will be automatically withdrawn. The Maples Group will make all job offer decisions on a case-by-case basis and will take a number of factors into account, such as the role that you are applying for and the nature and circumstances of the past offence. You will have the opportunity to discuss the matter with us before a decision is made. Further details will be provided at the time any conditional job offer is made.

Disclaimer: All personal information collected during the application process will be used for recruitment-related purposes only. Please refer to our Job Applicant Privacy Notice at maples.com/privacy for details on how we handle personal information relating to job applicants.

APPLICATION DEADLINE

[Date]