About this role
The role of the Senior Resilience Analyst (Testing) will help shape and deliver Asta’s Business Continuity Management (BCM) and resilience testing programme across its own operations and managed syndicates. The person will own the BCM lifecycle and develop an integrated multi-year testing strategy, leading increasingly sophisticated exercises that assess whether Important Business Services (IBSs) can remain within approved impact tolerances during severe-but-plausible disruption. Additionally, the role will be responsible for turning test findings into practical improvements through clear evidence, lessons learned and retesting. If successful, you will bring together business impact analyses (BIAs), crisis and major incident plans, recovery runbooks and market exercises, aligned with ongoing client oversight, third-party risk management and operational resilience arrangements.
- Own the BCM lifecycle: coordinate and challenge BIAs; maintain crisis and major incident plans, continuity plans and recovery runbooks; align recovery priorities and dependencies with IBS mapping and approved tolerances.
- Secure appropriate validation and approvals and keep plans and supporting documentation current following material change, incidents and exercises.
- Develop, secure approval for and maintain an integrated multi-year test strategy and annual delivery plan, proportionate to service risk, scale, maturity, complexity and change.
- Ensure the testing programme provides appropriate coverage of important business services across Asta and managed syndicates.
- Identify and escalate current assurance gaps, with conclusions based on completed testing rather than planned activity.
- Design and lead severe-but-plausible scenarios informed by mapping, vulnerabilities, incidents and emerging threats.
- Build increasingly sophisticated simulations using staged scenario developments and integrated business, technology and third-party recovery tests, with controlled live testing where appropriate and approved.
- Set clear objectives, assumptions, success criteria and evidence requirements.
- Assess primary impact tolerances and relevant approved sub-tolerances, keeping these distinct from recovery targets.
- Coordinate and facilitate end-to-end exercises with relevant internal and external participants.
- Test crisis activation, escalation, decision-making, workarounds, recovery, data integrity and internal/external communications.
- Coordinate participation in Lloyd’s and wider market exercises and assess central-service and shared-dependency disruption.
- Coordinate the business continuity elements of risk-based material outsourcing exercises.
- Technical supplier-testing assurance remains with IT, including challenge of methodologies, scenario coverage and recovery evidence.
- Incorporate the findings into service-level assessments against approved impact tolerances and follow-up actions.
- Set test evidence standards and ensure exercise records are complete, reliable and traceable.
- Clearly report outcomes, performance against tolerances, assumptions, limitations and vulnerabilities, distinguishing demonstrated recovery capability from untested assumptions Lead lessons learned after exercises and relevant incidents; agree actions, responsibilities and completion dates, track remediation, and escalate overdue actions and material weaknesses.
- Plan and deliver retesting to validate closure, update BCM plans, supporting documentation and the test strategy, and measure coverage, evidence quality, action closure, retest outcomes and delivery predictability