Principal Consultant - (Senior Manager) Operational Resilience

Principal Consultant (Senior Manager) - Operational Resilience & Cyber Risk

Location: Edinburgh or Glasgow (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent

Build resilience where it matters most across cyber, technology, and third-party risk

The Role

Capco is seeking experienced Principal Consultants in Operational Resilience and Cyber Risk to join our growing Finance, Risk, Regulatory & Financial Crime (FRRF) capability. In this senior role, you'll lead complex client engagements across financial services and energy, advising on regulatory expectations such as PRA and DORA while driving the design and implementation of robust resilience frameworks. You'll play a key role in shaping client strategy, leading transformation programmes, and contributing to capability growth. You'll also leverage approved AI tools and AI-enabled ways of working to enhance analysis, accelerate insight generation, and improve delivery while applying responsible AI practices and appropriate human oversight.

What You'll Do

• Lead operational resilience assessments, scenario testing, and control implementation programmes, identifying opportunities to leverage AI-enabled workflows and automation to strengthen resilience outcomes.
• Advise clients on regulatory readiness across PRA, DORA, and other resilience frameworks, translating regulatory expectations into practical transformation strategies and sustainable operating models.
• Oversee cyber risk, third-party risk, and vendor resilience assessments, using AI-enabled analytics where appropriate to strengthen risk identification, prioritisation, and decision-making.
• Design and implement governance models, dashboards, Important Business Services (IBS), Impact Tolerance (ITOL), and reporting frameworks, ensuring robust governance, validation, and oversight where AI-assisted tools are utilised.
• Lead cyber and technology resilience transformation initiatives, including tooling, cloud security, and control enhancements, while contributing to business development, proposition development, and capability growth.

What We're Looking For

• Extensive experience delivering operational resilience, cyber risk, and third-party risk transformation within financial services, energy, or management consulting.
• Strong understanding of regulatory frameworks including PRA, DORA, and related operational resilience standards.
• Proven experience leading complex transformation programmes, including scenario testing, IBS/ITOL calibration, control remediation, and operating model transformation.
• Experience using approved AI too