Management Consultant - Operational Resilience & Cyber
Operational Resilience & Cyber Risk Consultant – All Levels
Location: London (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent
Build resilience where it matters most: cyber, technology, and third-party risk
The Role
Capco is seeking Operational Resilience and Cyber Risk professionals to join our growing Finance, Risk, Regulatory & Financial Crime (FRRF) capability. You'll work across the financial services and energy sectors, advising clients on regulatory expectations such as PRA and DORA, designing robust resilience frameworks, and implementing controls to close exposure gaps. This is an opportunity to deliver mission-critical transformation programmes while leveraging approved AI tools and AI-enabled ways of working to enhance analysis, improve delivery, and support better decision-making through responsible AI practices and appropriate human oversight.
What You'll Do
- Deliver operational resilience assessments, scenario testing, and control implementation activities, using AI-enabled analysis where appropriate to improve efficiency and insight.
- Support regulatory readiness across PRA, DORA, and other resilience frameworks, identifying opportunities to enhance delivery through AI-enabled workflows and automation.
- Assess cyber posture, third-party exposure, and vendor resilience, combining data-driven insights with expert judgement to strengthen organisational resilience.
- Define and implement governance models, dashboards, and reporting mechanisms, ensuring appropriate governance, validation, and oversight where AI-assisted tools are used.
- Guide technology implementation and support cyber and operational resilience transformation programmes, identifying opportunities to responsibly apply AI to improve client outcomes.
What We're Looking For
- Experience in operational resilience, cyber risk, and third-party risk within financial services or energy.
- Practical knowledge of Important Business Services (IBS), Impact Tolerance (ITOL) calibration, scenario testing, and process mapping.
- Experience implementing regulatory change and control remediation, with familiarity using approved AI tools to support analysis and delivery.
- Strong collaboration skills with the ability to work across business, technology, security, and risk teams.
- Excellent communication and stakeholder management skills together with an interest in responsible AI adoption within regulated environments.