Job Description

Summary

Cboe Europe is seeking an experienced Senior Operational Resilience Engineer to support compliance with UK and EU operational resilience requirements and to take first-line ownership of how new and changing regulatory requirements are assessed, planned for, and embedded across the business, as part of a global Operational Resilience Engineering Team. Applying resilience and regulatory-implementation expertise, you will help strengthen our ability to prevent, respond to, and recover from disruptive events, particularly those involving technology and cyber security. Working with technology, operations, risk, legal, compliance, and audit teams, you will document and enhance the resilience of trading services used by hundreds of financial services firms across the UK and EU. The role takes an AI-first approach, automating evidence gathering, mapping updates, monitoring, and reporting.

Location

London, UK

Responsibilities

In this role, you will be responsible for:

• Maintaining a complete inventory of key attributes that support our trading services, including:
  • Business services and their impact tolerances.
  • Supporting functions and their criticality.
  • Processes, sub-processes, assets, and controls that support these services and functions.
  • Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for the above.
• Developing automated triage, enrichment, event correlation, and post-incident documentation capabilities.
• Supporting risk identification, operational resilience planning, incident management and testing by:
  • Helping functions complete business impact assessments and clearly define technology and operational risks.
  • Helping functions document business continuity plans aligned with RTOs, RPOs, and our operational resilience strategy.
  • Identifying vulnerabilities, single points of failure, and interdependencies within business services.
  • Designing and delivering resilience testing, including severe but plausible desktop scenario exercises.
  • Documenting test results and implementing recommendations for improvement.
• Designing, building, and maintaining automated solutions for BC/DR evidence collection, incident management, and change management, ensuring outputs are examination-ready and meet regulatory requirements.
• Leading first-line regulatory implementation by:
  • Leading assessment, business impact analysis, and implementation planning for new and incoming regulatory requirements (e.g. MiFID II/MiFIR, DORA, and EMIR), and translating them into operational processes, technology changes, and first-line business controls.
  • Coordinating cross-functional implementation with Technology, Operations, Legal, and Product, embedding control testing as it matures, and acting as the first line's interface with second-line Compliance.
• Supporting operational resilience governance, monitoring, and reporting by:
  • Preparing regulatory self-assessments for operational resilience and DORA.
  • Maintaining a regulatory change and implementation register and reporting status to senior management, the Regulatory Decisions Committee (RDC), and internal and external audit.
  • Preparing regular reports for senior management and board committees.
  • Maintaining operational resilience management information.
  • Supporting the analysis of test results and tracking and reporting remediation actions.
  • Acting as a key risk partner to the Operations function.