About Us
Foundever® is a global leader in the customer experience (CX) industry. With 150,000 associates across the globe, we’re the team behind the best experiences for +800 of the world’s leading and digital-first brands. Our innovative CX solutions, technology and expertise are designed to support operational needs for our clients and deliver a seamless experience to customers in the moments that matter.
Job Summary
Runs the IT operational risk discipline day to day across the Telecom, Network, Systems — the register, the assessments, the control testing and the resilience assurance that together give leadership an honest view of where the estate is exposed and what is being done about it.
Identify and quantify operational risk before it presents as an incident — single points of failure, capacity and obsolescence, control gaps, concentration and dependency.
Drive treatment plans to named owners and dates, and hold them there until closed or formally accepted at the right level.
Assure resilience and recoverability through evidence — tested, documented and honestly reported — rather than through assumption.
The role carries process ownership rather than remediation delivery. Its value lies in the accuracy of the picture it presents and the persistence with which it pursues closure.
Primary Job Responsibilities
Risk Identification & Register Management
- Own the day-to-day operation of the IT operational risk register: intake, assessment, scoring against the agreed impact and likelihood scale, ownership assignment, and periodic review to a fixed cadence.
- Run structured risk assessments for sites, platforms, circuits and services; document exposure, existing controls, residual risk and recommended treatment.
- Maintain the single-point-of-failure and concentration view across circuits, carriers, data centres, platforms and key suppliers, and keep it current as the estate changes.
- Mine incident, problem and change data for emerging risk signals — repeat causes, ageing infrastructure, capacity pressure and control bypass — and convert them into register entries.
- Prepare risk acceptance submissions with a clear statement of exposure and rationale, for decision at the appropriate authority level.
Show the full description
Resilience, Continuity & Recovery Assurance
- Maintain the DR and business continuity test calendar; ensure tests are scheduled, executed, evidenced and reported without softening the result.
- Review backup, replication, failover and recovery capability against stated RTO and RPO commitments, and raise the gap where reality does not meet the commitment.
- Track remediation of failed or partial test outcomes through to retest and closure.
- Maintain current recovery documentation and dependency mapping for critical services and sites.
Controls, Audit & Compliance
- Operate the control testing schedule across service management and infrastructure controls; document evidence, exceptions and compensating controls.
- Coordinate internal and external audit requests — evidence collection, walkthrough support and response drafting — and track findings to remediation closure.
- Maintain alignment of the control set to ITIL 4, ISO 20000, ISO 27001, SOC 2 and PCI DSS expectations as applicable to the estate.
- Assess the risk implications of significant changes and new services before they enter production, and feed the position into the change process.
Third-Party Risk & Reporting
- Assess and periodically reassess vendor and supplier risk — dependency, resilience posture, security position and concentration — working with the Vendor Management Office.