About the Business

Quilter plc is a leading wealth management business, helping to enable brighter financial futures for every generation.

Quilter oversees £157.4 billion in customer investments (as of August 2026). It has an adviser and customer offering spanning financial advice, investment platforms, multi-asset investment solutions, and discretionary fund management. The business is comprised of two segments: Affluent and High Net Worth.

Affluent encompasses the financial planning business, Quilter Financial Planning, the Quilter Investment Platform and Quilter Investors, the multi-asset investment solutions business.

High Net Worth includes the discretionary fund management business, Quilter Cheviot, together with Quilter Cheviot Financial Planning – offering a highly personalised service to private clients, charities, trustees, and professional partners. Quilter Cheviot has presence throughout the UK, Ireland and Channel Islands.

At Quilter we never stand still. Our foundations are rooted in our extraordinary expertise, which is trusted by hundreds of thousands of customers, but we have great ambitions to stay one step ahead and make an even greater difference to the people and communities we serve, including our colleagues.

Our business is transforming, continually modernising, and becoming even more customer centric. So, if you want to be bold in the pursuit of your ambitions, bring new ideas, and challenge and evolve what we do, it’s the perfect time to join us!

About the Role

Level: 4

Department: Technology Function – Information Security

Location: London, United Kingdom or Southampton, United Kingdom

Contract: Permanent

Regulated/Non-Regulated: Non-Regulated

We are seeking a proactive, experienced and highly organised Testing & Exercising Specialist to join our Resilience & Crisis Team (RCT). This is an opportunity to shape and mature Quilter’s testing approach—moving beyond compliance-led exercises into insightful testing that strengthens resilience and supports informed decision-making at all levels. The Testing & Exercising Specialist is responsible for leading the coordination, planning, development, delivery and driving continuous improvement of severe but plausible Operational Resilience testing and exercising activities across Quilter.  

The role will be responsible for delivering a structured Quilter wide testing programme that provides assurance over Quilter's operational resilience capabilities, important business services, critical processes and response arrangements. Working closely with Operational Resilience Specialists, Business Owners, Incident Managers, Technology Teams, Threat Intelligence functions and Risk stakeholders, the role will ensure testing activities are risk-led, intelligence-driven, realistic and aligned to regulatory expectations.

The individual will provide central oversight of all resilience-related testing across Quilter, ensuring appropriate coverage against Operational Resilience requirements, Important Business Services, CMORG scenarios, open vulnerabilities and resilience capability pillars. They will drive consistency through testing standards, methodologies, templates, recording and operating procedures, while ensuring lessons learned are effectively translated into measurable resilience improvements.

The RCT is responsible for ensuring all work conducted is of direct relevance to protecting both the organisation and the safety and security of company personnel, property and reputation.

Key Responsibilities:

Deliver Quilters Testing Strategy

• Lead and continuously enhance Quilters Operational Resilience Testing approach, framework and roadmap.
• Drive and deliver a risk-based annual testing programme and rolling three-year exercise plan.
• Design, coordinate and deliver high level resilience tests and exercises across Quilter.
• Prioritise testing activity using risk insights, threat intelligence, business change, emerging vulnerabilities and regulatory developments.
• Produce insights and metrics evidencing testing coverage, outcomes, trends and maturity improvements across Operational Resilience capabilities, Important Business Services (IBS) and CMORG requirements.
• Ensure testing activities meet regulatory expectations and maintain appropriate evidence, documentation, and audit trails.

Exercise Design & Delivery

• Design, coordinate and facilitate a range of resilience testing activities, including tabletop exercises, simulations and live tests.
• Ensure exercises effectively assess response, recovery and resilience capabilities.
• Drive and influence business teams to increase the scope, frequency, and quality of resilience testing within their areas, supporting the continued maturity and effectiveness of Quilter’s overall testing approach.
• Drive consistency and quality across all testing activities.

Testing Governance & Oversight

• Act as the central point of coordination for Operational Resilience testing.
• Maintain oversight of all resilience testing activity and ensure appropriate coverage across key risks and capabilities.
• Identify testing gaps, emerging risks and future testing priorities.
• Produce and present management information and reporting for senior leadership and governance forums.

Horizon Scanning & Risk-Based Prioritisation

• Collaborate with Cyber, Threat Intelligence, Technology, Risk, Business Continuity and Operational Resilience teams to identify emerging risks and vulnerabilities.
• Conduct horizon scanning to assess industry, regulatory and threat landscape developments.
• Develop realistic, challenging, and regulatory-aligned test scenarios.
• Ensure testing remains aligned to the organisation's evolving risk profile and strategic priorities.
• Translate emerging threats into meaningful testing and exercising activities.

Standards, Methodology & Business Support

• Maintain testing methodologies, standards, procedures, templates and toolkits.
• Promote a consistent approach to resilience testing across the organisation.
• Continuously improve testing practices in line with industry good practice and regulatory expectations.

Lessons Learned & Continuous Improvement

• Lead exercise debriefs, lessons learned reviews and post-test reporting.
• Ensure findings, vulnerabilities and improvement actions are documented, tracked and progressed to completion.
• Monitor remediation activities and escalate overdue or high-risk actions.
• Identify recurring themes and systemic weaknesses across testing activities.
• Support the ongoing maturity and effectiveness of Quilters Operational Resilience capability.

Additional Responsibilities

• Participate in the 24/7 Resilience and Crisis Team (RCT) on-call rota.
• Support incident response, crisis management and resilience activities as required.
• Lead or contribute to specialist workstreams and strategic initiatives as directed by the RCT Manager.
• Support delivery of wider Operational Resilience objectives and programme activities.

Success Measures

• Successful delivery of a maturing annual resilience testing programme and rolling three-year roadmap.
• Demonstrable testing coverage across Operational Resilience capabilities, IBSs and CMORG requirements.
• Consistent application of testing standards and methodologies across the organisation.
• Timely completion of lessons learned, remediation actions and improvement initiatives.
• Measurable improvements in resilience maturity, assurance outcomes and regulatory readiness.
• Increased organisational confidence in response, recovery and operational resilience capabilities.

About You

• Experience in leading, designing, coordinating and facilitating resilience testing and exercising programmes.
• Experience of running large and complex exercises with senior stakeholder engagement.
• Outstanding interpersonal skills to create effective and enduring relationships.
• Excellent written and verbal communication skills.
• Excellent facilitation and presentation skills, including confidence to challenge senior stakeholders.
• Experience in facilitating and leading operational resilience or crisis tests and exercises.
• Strong time management skills.
• Confident in planning, scheduling and programme management.
• An innovative thinker with the ability to work independently within a fast-paced environment.
• An investigative mindset.
• Positive, self-motivated and dedicated to task delivery.
• A specialist who is proactive in supporting others and sharing knowledge.
• Proven ability of creating, reviewing and updating key governance documentation such as standard operating procedures, frameworks and policies.
• Confident in turning exercise outcomes into analytical insights and practical improvements.  
• Knowledge of Operational Resilience frameworks and regulatory expectations would be preferred.
• Experience of Testing in a Financial services role is desirable but should not prevent applicants applying if the experience was gained within another sector.  

Qualifications - Qualifications in any relevant field are preferred, but not required, or relevant operational experience gained in a Corporate, Military, Law Enforcement or Government agency sphere.

#LI-IC1

Inclusion & Diversity

We value diversity and strive to promote inclusivity in all aspects of our culture. We believe in equal opportunities for all, ensuring that no applicant encounters less favourable treatment based on anything but their skills, qualifications, experience, and potential. We celebrate the unique contributions of a diverse workforce and create a respectful, nurturing environment where every colleague can thrive.

Values

Do the right thing: We act with integrity and are proudly committed to going above and beyond in service of our clients and the support we provide our communities.
Always curious: We continuously seek new ideas and knowledge so we’re one step ahead of our clients’ needs. We look for inspiration everywhere and encourage experimentation, recognising that this is how we create brilliant solutions for brighter futures.
Embrace challenge: We aim high to transform our potential into meaningful outcomes. With ambition as our driving force and a steadfast commitment to growth, we succeed for the good of every generation.
Stronger together: Combining our diverse talents, we accomplish more collectively than we ever could do alone. We speak openly, actively listen, and support each other, and constructively challenge and embrace new ideas. We seek empowerment and demonstrate ownership and trust, with the confidence to make impactful decisions.

Core Benefits

Holiday: 182 hours (26 days)

Quilter Incentive Scheme: All employees are eligible to participate in incentive scheme, to incentivise business performance and their contribution.

Pension Scheme: A non-contributory company pension scheme that can be boosted through personal contributions.

Private Medical Insurance: Single cover as standard with options to increase cover to include your partner or children.

Life Assurance: 4x your salary.

Income Protection: 75% of salary, less state benefits, payable after 26 weeks of absence.

Healthcare Cash Plan: Jersey employees only

In addition to our core benefits, we offer a range of flexible benefits to UK employees that you can choose from and pay for conveniently via a salary deduction.