Rodeo
Get started

Pearson

Lead, Information Security

London
Posted about 12 hours ago
Sign up to applySee more jobs like this

How your CV stacks up

1Upload CV
2Analyse CV
3Improve CV

Upload your CV to see how well it fits this job role

?%

Job Title: Principle, Information Security - Operational Resilience

CF: OCTO

Function: GRC, Cybersecurity

Career Arch: Technology / Security / Information Security

Tier: E35 (to start as the person does not have a team) and then M38 when they hire a team – hire for an M38

Title: Principle, Information Security – Operational Resilience

Reports to: Kate Beverly

Location: London, UK

Build resilience into the way Pearson operates. Define what must keep running. Give leaders confidence in disruption.

Pearson is seeking a Principle, Information Security - Operational Resilience to establish and lead its central Operational Resilience capability. This is a highly visible enterprise role responsible for defining the framework, governance, and operating rhythm needed to sustain Pearson’s most critical services through major disruption. The role will lead the development of the Minimum Viable Company approach, set standards for planning and exercising, coordinate activity across business and technology teams, and provide executives with credible, evidence-based assurance on resilience readiness.

The ideal candidate will be an experienced resilience, continuity, or risk leader who can bring structure to an evolving environment, navigate complexity with confidence, and influence across a large matrixed organisation. This role requires someone who can translate resilience concepts into practical operating requirements, align business, technology, cyber, supplier, and crisis stakeholders, and establish a capability that is credible to senior leadership and practical for operational teams.

Pearson Leadership Dimensions

As a senior leader at Pearson, you will be expected to embody and role model our leadership dimensions. You will align the resilience capability to Pearson’s purpose and strategy, simplify complexity into clear operational priorities, build a collaborative and high-performing culture, and deliver measurable results. This role requires visible leadership, sound judgement in ambiguity, and the ability to bring people together across business, technology, risk, and security around a shared understanding of what matters most in disruption.

What You’ll Do

Strategic leadership and transformation

  • Define and own the long-term vision, strategy, and implementation roadmap for Operational Resilience at Pearson, moving the organisation from fragmented planning to a credible enterprise capability with clear standards, effective governance, and demonstrable readiness.
  • Translate resilience concepts into a practical operating model for a complex global business, creating clarity on critical services, minimum acceptable service levels, prioritisation, tolerances, and recovery sequencing.
  • Act as a senior subject matter leader for operational resilience and continuity, bringing thought leadership, external awareness, and disciplined execution to how Pearson matures its capability.
  • Lead a shift in how Pearson approaches resilience by moving the focus from document collection alone to service-level understanding, tested recovery capability, decision-useful data, and practical executive assurance.

Framework, governance, and Minimum Viable Company

  • Own and maintain Pearson’s enterprise operational resilience framework, associated standards, policy requirements, templates, governance forums, and reporting mechanisms needed to run the capability effectively and consistently.
  • Lead the development and ongoing refinement of Pearson’s Minimum Viable Company approach, ensuring the organisation can articulate the minimum operating state required to continue safely, legally, and sustainably through severe disruption.
  • Define and oversee the methodology for identifying critical services, important processes, recovery priorities, and service tolerances, including the relationship between business requirements, technology recovery, supplier dependencies, and crisis decision-making.
  • Ensure resilience requirements are governed in a proportionate, practical, and auditable way, with clear accountability for plan ownership, review cycles, evidence retention, remediation tracking, and executive escalation.

Reasons to use Rodeo

I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?

Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.

Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.

Start with a chat, not a search bar

Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.

P

Graduate Consultant — 2026 Scheme

PwC·London, UK
£35,000/yr

Why you're a good match

Strong

Your economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.

See breakdown
Save jobNot relevant
View details

It searches the market for you

Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.

Why you're a good match

You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.

See breakdown
Strong

Experience fit

Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.

See breakdown
Strong

Only hits

No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.

Planning, exercising, and assurance

  • Oversee the creation, refresh, quality, and maintenance of continuity and resilience plans across the enterprise, ensuring they are aligned to service priorities and usable in practice rather than static documentation.
  • Design and lead a structured annual exercise and testing programme, including tabletop simulations, targeted service-level recovery tests, cross-functional scenario walkthroughs, and lessons-learned reviews.
  • Translate testing into measurable assurance by tracking outcomes, remediation actions, residual risks, and evidence that recovery assumptions have been validated for leadership and audit purposes.
  • Provide regular executive reporting on resilience maturity, plan coverage, testing progress, critical dependency risks, unresolved issues, and overall readiness, ensuring leaders receive decision-useful insight rather than disconnected metrics.

Cross-functional leadership and operating model

  • Work across business divisions, enterprise risk, technology, cyber, supplier management, internal audit, and crisis management to build a coherent end-to-end approach to resilience that clarifies ownership and reduces fragmentation.
  • Act as the central point of leadership for divisional continuity leads and plan owners, creating a sustainable operating rhythm of governance forums, reviews, escalation paths, management information, and follow-up actions.
  • Ensure the Operational Resilience capability complements and strengthens adjacent disciplines such as IT disaster recovery, cyber incident response, crisis management, enterprise risk, and third-party resilience, with clear boundaries that avoid duplication.
  • Influence senior stakeholders across a matrixed global organisation, balancing pragmatism with rigour while driving accountability for resilience activity that often sits outside direct reporting lines.

People and organisation

  • Establish and lead a small but high-impact central Operational Resilience team, setting direction, priorities, ways of working, and performance expectations for a function intended to grow in credibility and maturity over time.
  • Build a culture of practical resilience, collaboration, and accountability by coaching team members and business stakeholders to focus on usable plans, evidence-based readiness, and continuous improvement rather than compliance alone.
  • Support workforce planning, role design, onboarding, development, and capability building for the resilience function, creating clear expectations for specialist, analyst, and divisional continuity lead roles.
  • Create an operating rhythm that supports both UK and US time zones, enabling the central team to work effectively with distributed stakeholders across Pearson’s global environment.

Get help with your application

Your very own career expert that helps elevate your application to the next level.

Get help applying for this job

What You Bring

  • Significant experience leading operational resilience, business continuity, disaster recovery, crisis management, or a closely related enterprise resilience function in a complex global organisation.
  • Demonstrated ability to build frameworks, governance models, and cross-functional programmes that depend on influence rather than direct control, particularly in matrixed environments with multiple stakeholder groups.
  • Deep experience with business impact analysis, critical service identification, dependency mapping, service tolerances, scenario testing, continuity planning, and resilience or recovery assurance.
  • Strong understanding of the relationship between business continuity, IT disaster recovery, cyber resilience, supplier resilience, enterprise risk, audit, and crisis management, with the judgement to define clear boundaries between them.
  • Experience building or maturing capabilities, introducing standards, and creating sustainable governance, reporting, and assurance mechanisms that stand up to executive and audit scrutiny.
  • Strong analytical and reporting capability, with experience translating resilience data, interdependencies, and complex risks into clear executive insight and action-oriented management information.
  • Excellent stakeholder management, communication, and influencing skills, with the ability to work credibly with senior leaders, operational teams, and control functions across a large matrixed organisation.
  • Experience leading teams, developing specialist capability, and building a culture of accountability, clarity, and practical delivery in a new or evolving enterprise function.
  • Comfort working with ambiguity and complexity, with the resilience and judgement needed to make balanced, risk-aware decisions in areas where standards are still developing.
  • Relevant qualifications in business continuity, resilience, risk, or security would be advantageous, for example CBCI, CBCP, DRI, ISO 22301-related training, or equivalent practical experience.

Why Pearson?

This is an opportunity to build a genuinely important enterprise capability at a pivotal stage in Pearson’s resilience maturity. As Pearson becomes more dependent on digital services, shared platforms, suppliers, coordinated recovery, and credible assurance, the need for a clear and effective operational resilience capability is increasing. The organisation is still early in its maturity journey, which makes this role both challenging and unusually high impact.

This role offers the chance to shape how Pearson defines what must keep running, how it prioritises during disruption, and how it gives leaders confidence that critical services can be sustained and recovered in a controlled way. It is a rare opportunity to create lasting structure, influence enterprise decision-making, and establish a capability with visibility across leadership, risk, technology, security, and the wider business.

Trusted by 25,000+ job seekers

“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”

Jessica, London

Get help applying for this job

Skills

Operational Resilience
Business Continuity
Disaster Recovery
Crisis Management
Risk Management
Governance
Strategic Leadership
Stakeholder Management
Dependency Mapping
Business Impact Analysis
Cyber Resilience
Change Management
Executive Reporting
Policy Development
Matrix Management

Location

London, England, United Kingdom

Sign up to applySee more jobs like this