The University of Sheffield
Digital Risk and Resilience Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Overview
IT Services at the University of Sheffield is seeking a Digital Risk and Resilience Manager to lead governance, assurance and business continuity/disaster recovery (BC/DR) activities across the department, ensuring we identify, manage and respond to risk effectively while remaining resilient to disruption.
Sitting within our Security & Assurance team and reporting to the Chief Information Security Officer, you will lead the design and continuous improvement of relevant frameworks, policies and procedures, chairing key governance and working groups, and acting as a trusted second line assurance function for internal and external stakeholders, including the Director of IT Services and Chief Operating Officer.
You will also take ownership of risk and resilience across IT Services, working closely with the University's central Risk and BC teams to ensure our risk processes comply with central policy, and that business continuity and disaster recovery arrangements are robust, tested and aligned with wider institutional plans. You will line manage our Business Continuity Lead, providing direction and support to embed resilience across our people, processes and technology.
This is a pivotal role for someone who enjoys working across governance, risk and resilience disciplines, who can build credibility with senior stakeholders, and who wants to make a tangible, department-wide impact. You will bring together assurance expertise with a strategic view of organisational resilience, helping IT Services anticipate, withstand and recover from disruption while supporting the University's wider ambitions.
Main Duties And Responsibilities
- Lead the design, implementation and continuous improvement of risk, resilience and assurance processes across IT Services, applying IT service management good practice (e.g. ITIL) so that governance, risk and resilience disciplines are embedded in how IT Services designs, delivers and operates its services
- Provide expert second line assurance to internal and external stakeholders, including the Director of IT Services and Chief Operating Officer
- Lead on internal and external audit activity in IT Services
- Own risk and resilience across IT Services, leading business continuity and disaster recovery (BC/DR) planning, exercising and testing, and working closely with the University's central Risk and BC teams to ensure IT Services arrangements are aligned with wider institutional plans
- Line manage the Business Continuity Lead, providing direction, support and professional development to embed resilience across people, process and technology
- Collaborate with colleagues in related disciplines, such as data protection, research data management, and strategic planning and change
- Work with colleagues across IT Services and the wider University to promote governance, assurance, risk and resilience awareness, skills and culture
- Carry out other duties, commensurate with the grade and remit of the post
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Person Specification
Our diverse community of staff and students recognises the unique abilities, backgrounds, and beliefs of all. We foster a culture where everyone feels they belong and is respected. Even if your past experience doesn't match perfectly with this role's criteria, your contribution is valuable, and we encourage you to apply. Please ensure that you reference the application criteria in the application statement when you apply.
Criteria
| Essential Or Desirable | Criteria | Stage(s) assessed at |
|---|---|---|
| Essential | Experience of governance, assurance and risk management in a large, complex organisation | Application/interview |
| Essential | Solid, demonstrable understanding of risk management, governance and resilience, including business continuity and disaster recovery | Application/interview |
| Essential | Practical experience of IT/digital service operations and delivery, and applying relevant frameworks (e.g. ITIL) to embed governance, risk and resilience disciplines | Application/interview |
| Essential | Experience establishing and embedding governance, risk and resilience frameworks within a complex organisation | Application/interview |
| Essential | Proven experience leading or overseeing business continuity and/or disaster recovery planning, exercising and testing | Application/interview |
| Essential | Relevant professional qualification in information security, risk management or business continuity (e.g. CISSP, CISM, MBCI) or equivalent professional experience | Application/interview |
| Essential | Experience of line management, or leading and developing individuals or teams | Application/interview |
| Essential | Ability to guide, influence and collaborate with colleagues and senior stakeholders to embed governance, risk and resilience requirements and best practice into everyday ways of working | Application/interview |
| Desirable | Familiarity with information security disciplines and how they relate to risk and resilience | Application/interview |
| Desirable | Previous experience working in the Higher Education sector | Application/interview |
| Desirable | Familiarity with related disciplines such as data protection (GDPR) and information management | Application/interview |
Further Information
- Grade: 8
- Salary: £48,822-£58,225 per annum with the potential to progress to £65,509 through sustained exceptional contribution
- Work arrangement: Full-time
- Line manager: Chief Information Security Officer
- Direct reports: Business Continuity Lead
- Right to work in the UK: If you do not currently hold the right to work in the UK, you can find more information here to help determine your visa eligibility. Additional guidance is also available on the UK Visa & Immigration website.
Our website
https://www.sheffield.ac.uk/it-services/about
For informal enquiries about this job contact Tom Griffin, Chief Information Security Officer: at t.griffin@sheffield.ac.uk
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Next steps in the recruitment process
We plan to let candidates know if they have progressed to the selection stage within two weeks of the closing date. If you need any support, equipment or adjustments to enable you to participate in any element of the recruitment process you can contact it-services-recruitment@sheffield.ac.uk
Our vision and strategic plan
We are the University of Sheffield. This is our vision: sheffield.ac.uk/vision.
What We Offer
- A minimum of 41 days annual leave including bank holiday and closure days (pro rata) with the ability to purchase more.
- Flexible working opportunities, including hybrid working for some roles.
- Generous pension scheme.
- A wide range of discounts and rewards on shopping, eating out and travel.
- A variety of staff networks, providing opportunities for social interaction, peer support and personal development (for example, Race Equality, LGBT+, Women’s and Parent’s networks).
- Recognition Awards to reward staff who go above and beyond in their role.
- A commitment to your development access to learning and mentoring schemes
- A range of generous family-friendly policies
- paid time off for parenting and caring emergencies
- access to menopause support in the workplace
- paid time off and support for fertility treatment
- and more
More details can be found on our benefits page: sheffield.ac.uk/jobs/benefits.
We are a Disability Confident Leader (opens in a new window). If you have a disability and meet the essential criteria for this job you will be invited to take part in the next stage of the selection process.
Criminal record
A basic DBS check will be needed for this role. More details on the checks can be found on the Government website: gov.uk/criminal-record-checks-apply-role.
Possession of a criminal record is not an automatic bar to employment at the University of Sheffield. We recognise the value of steady employment in the rehabilitation process and examine each case in its own right. More information can be found on our Information for candidates page: sheffield.ac.uk/jobs/candidates.
Closing Date: 25/10/2026
We are a research university with a global reputation for excellence. Our ideas and expertise change the world for the better, making a real difference to society. We know that when people come together with different views, approaches and insights it can lead to richer, more creative and innovative teaching and research and the highest levels of student experience. Our University Vision (www.sheffield.ac.uk/vision) outlines our commitment to building a diverse community of staff and students that recognises and values the abilities, backgrounds, beliefs and ways of living for everyone.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London