Principal Consultant – Cyber & Operational Resilience

Location: London (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent

Strengthen cyber resilience and safeguard critical operations across financial services

The Role

Capco is seeking experienced Principal Consultants to join our Cyber & Operational Resilience capability within the Finance, Risk, Regulatory & Financial Crime (FRRF) practice. You'll work with senior stakeholders across financial services organisations to design and deliver cyber resilience strategies, implement robust resilience frameworks, and enhance operational resilience capabilities. This role combines strategic advisory with hands-on delivery, helping clients strengthen cyber risk management, meet evolving regulatory expectations, and build resilient operating models. You'll also leverage approved AI tools and AI-enabled ways of working to enhance analysis, improve delivery, and generate data-driven insights while applying responsible AI practices and appropriate human oversight.

What You'll Do

Deliver cyber and operational resilience transformation programmes aligned to regulatory frameworks such as PRA, DORA, and other global resilience standards, identifying opportunities to leverage AI-enabled workflows and automation.
Assess and enhance cyber resilience capabilities, including resilience frameworks, operating models, controls, and governance, using AI-enabled analysis where appropriate to strengthen decision-making and operational effectiveness.
Support third-party and vendor risk assessments, identifying vulnerabilities across supply chains and technology ecosystems while combining AI-enabled insights with expert judgement.
Design and implement resilience governance, Important Business Services (IBS), Impact Tolerance (ITOL), scenario testing, and reporting frameworks, ensuring robust governance, validation, and oversight where AI-assisted tools are utilised.
Collaborate with technology teams to support cyber tooling, cloud security initiatives, and control enhancements, identifying opportunities to responsibly apply AI to improve client outcomes.

What We're Looking For

Experience in cyber resilience, cyber risk, and operational resilience within financial services or management consulting.
Strong understanding of cyber security frameworks such as NIST and ISO 27001, together with regulatory expectations including PRA and DORA.
Practical experience delivering resilience testing, control assessments, remediation programmes, and technology-enabled transformation initiatives.
Ability to translate complex regulatory requirements into practical business and technology solutions while leveraging approved AI tools to enhance analysis and delivery.
Excellent communication and stakeholder management skills, together with an interest in AI-enabled ways of working and responsible AI adoption within regulated environments.

Bonus Points For

Experience delivering cyber security assessments, cloud security initiatives, or security architecture programmes.
Exposure to third-party risk management, supplier resilience, and operational resilience frameworks.
Experience supporting or leading scenario testing, resilience reporting, and operational resilience embedding programmes.
Familiarity with cyber tooling, security monitoring platforms, risk technologies, or AI-enabled cyber analytics.
Previous consulting experience within financial services or the energy sector.

Why Join Capco

Deliver high-impact transformation programmes for Tier 1 financial institutions.
Work in a collaborative, flat, and entrepreneurial consulting culture.
Access continuous learning, industry certifications, and structured career development.
Help shape the future of cyber and operational resilience through innovation, automation, and technology.
Be part of a team delivering meaningful change across financial services and energy.

Benefits

Core Benefits: Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.
Mental Health: Easy access to CareFirst, Unmind, Aviva consultations, and in-house first aiders.
Family-Friendly: Maternity, adoption, shared parental leave, plus paid leave for sickness, pregnancy loss, fertility treatment, menopause, and bereavement.
Family Care: Eight complimentary backup care sessions for emergency childcare or elder care.
Holiday Flexibility: Five weeks of annual leave with the option to buy or sell holiday days based on your needs.
Continuous Learning: Minimum 40 Hours of Training Annually. Take your pick—workshops, certifications, e-learning—your growth, your way. Business Coach