Principal Consultant - Operational Resilience & Cyber Risk

About the role

Capco is looking for experienced Principal Consultants in Operational Resilience and Cyber Risk to join its Finance, Risk, Regulatory and Financial Crime practice. Based in Edinburgh or Glasgow on a hybrid basis, the role leads complex client engagements in financial services and energy, advising on regulatory expectations such as PRA and DORA and helping design and implement resilient frameworks. It is a permanent position.

Key responsibilities

• Lead operational resilience assessments, scenario testing and control implementation programmes, using AI-enabled workflows and automation where appropriate.
• Advise clients on regulatory readiness under PRA, DORA and other resilience frameworks, turning them into practical transformation strategies.
• Oversee cyber risk, third-party risk and vendor resilience assessments, using AI-enabled analytics to strengthen risk identification and prioritisation.
• Design and implement governance models, dashboards, Important Business Services (IBS), Impact Tolerance (ITOL) and reporting frameworks.
• Lead cyber and technology resilience transformation, including tooling, cloud security and control enhancements, and contribute to business development and capability growth.

Required profile

• Extensive experience delivering operational resilience, cyber risk and third-party risk transformation in financial services, energy or management consulting.
• Strong understanding of PRA, DORA and related resilience standards.
• Proven experience leading complex transformation programmes such as scenario testing, IBS/ITOL calibration, control remediation and operating model transformation.
• Experience using approved AI tools, automation or advanced analytics while keeping appropriate governance and professional judgement.
• Excellent communication, leadership and stakeholder management skills, able to influence senior stakeholders across business and technology functions.

Bonus points

• Enterprise-wide operational resilience or cyber transformation leadership.
• Cloud security, cyber tooling, cyber security architecture or AI-enabled cyber analytics background.
• Vendor risk management, third-party governance and supply chain resilience experience.
• Mentoring and coaching experience, and business development or proposition development contributions.

What we offer

• Discretionary bonus, pension, health, life and critical illness insurance.
• Mental health support and family-friendly leave, including maternity, adoption, shared parental and bereavement leave.
• Eight complimentary backup care sessions and five weeks of annual leave.
• Minimum 40 hours of training per year and a Business Coach from day one.
• Gympass, travel insurance, Tastecard, season ticket loans, Cycle to Work and dental insurance.