Head of Operational Resilience
stage · Boston
Experience: 10+ years of experience
COMPANY OVERVIEW
KKR is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions. KKR aims to generate attractive investment returns by following a patient and disciplined investment approach, employing world-class people, and supporting growth in its portfolio companies and communities. KKR sponsors investment funds that invest in private equity, credit and real assets and has strategic partners that manage hedge funds. KKR’s insurance subsidiaries offer retirement, life and reinsurance products under the management of Global Atlantic Financial Group. References to KKR’s investments may include the activities of its sponsored funds and insurance subsidiaries.
TEAM OVERVIEW
The Global Security & Operational Resilience team provides 24/7 support across the Firm’s global operations, helping protect people, assets, and the continuity of critical business services. The ~80-member global team drives readiness through integrated physical security and investigations, threat and intelligence monitoring, crisis management, and enterprise operational resilience planning, exercising, and response.
POSITION SUMMARY
KKR is seeking a principal-level Head of Operational Resilience to lead the design, implementation, and execution of the firm’s global Operational Resilience program. Reporting to the Head of Security and Operational Resilience , this role is responsible for driving accountability and adherence to impact tolerance and recovery objectives during severe and plausible disruption by embedding requirements into day-to-day operations, operating effective controls, and leading remediation efforts to closure.
This role partners closely with Technology , Business leadership , Enterprise Risk Management , Compliance , Vendor management , Human Capital , and Internal Audit to maintain alignment with client, investor, and regulatory expectations and enterprise risk standards.
RESPONSIBILITIES
Key responsibilities include:
• Leadership & Operating Model
• Build, mentor, and lead a high-performing operational resilience team.
• Influence cross-functional stakeholders to deliver enterprise resilience outcomes and measurable program maturity.
• Program Ownership & Roadmap
• Own and operate KKR’s Operational Resilience program and multi-year roadmap, including associated procedures, playbooks, and evidence management.
• Establish and maintain governance routines to track progress, escalate risks, and drive timely decision-making.
• Important Business Services & Impact Tolerances
• Identify, maintain, and periodically review the inventory of Important Business Services (IBS) and support dependencies across people, processes, technology, data, facilities, and third parties.
• Define, document, and operationalize IBS impact tolerances with business leaders; ensure tolerances are measurable, actionable, and embedded in operating procedures and controls.
• Scenario Testing & Exercising
• Design and execute severe but plausible scenario testing and resilience exercises to validate the ability to remain within impact tolerances and recovery time objectives.
• Document outcomes, lessons learned, and resulting control enhancements; ensure improvements are implemented and sustained.
• Business Continuity Management
• Own and oversee the Business Continuity Management (BCM) program, including plan development, certification, governance, training/awareness, testing/exercises, and event execution.
• Control Effectiveness & Remediation
• Identify resilience gaps and drive remediation to closure with clear accountability, milestones, and risk transparency.
• Track remediation progress through governance forums and management reporting.
• Integrated Response & Recovery
• Coordinate resilience integration across crisis management, cyber incident response, technology disaster recovery, and physical security response to enable a unified enterprise response and recovery capability.
• Metrics, Reporting & Communication
• Establish and maintain resilience KPIs/KRIs, dashboards, and management reporting to communicate posture, key risks, and remediation status to senior leadership.
• Lead preparedness, communications, and awareness initiatives to strengthen resilience culture and improve adoption of planning and control requirements across global functions.
• Audit, Risk, and Regulatory Support
• Support regulatory reviews, risk assessments, and internal/external audits by providing timely documentation, evidence, and program narratives.
QUALIFICATIONS
• 10+ years of experience in operational resilience, business continuity, enterprise risk, or related disciplines; experience in financial services or similarly regulated environments preferred.
• Demonstrated experience leading enterprise-level resilience initiatives and driving cross-functional delivery in a global organization.
• Strong understanding of global regulatory expectations and industry standards (e.g., Basel, ISO 22301, NIST, PRA/FCA or comparable).
• Experience engaging with senior leadership during disruption events and managing complex stakeholder environments.
• Sector knowledge/experience in Insurance, Asset Management, Capital Markets, and Structuring processes.
CRITICAL COMPETENCIES FOR SUCCESS
• Executive presence with the ability to communicate resilience posture, trade-offs, and decisions clearly to senior leaders.
• Strong stakeholder management and influence across Technology, business functions, and control partners (ERM, Compliance, Audit).
• Program and change leadership: ability to build roadmaps, drive adoption, and deliver measurable outcomes across a global organization.
• Analytical rigor and diligence; ability to translate complex dependencies into practical controls and recovery strategies.
• Decisive leadership under pressure, including crisis response coordination and effective prioritization during disruption events.
• Strong writing and documentation capability; comfortable producing defensible evidence for audits and regulatory reviews.
• Continuous improvement orientation, including process enhancement, tooling modernization, and operational discipline.
#LI-HYBRID
This is the expected annual base salary range for this Boston-based position. Actual salaries may vary based on factors, such as skill, experience, and qualification for the role. Employees may be eligible for a discretionary bonus, based on factors such as individual and team performance.
Base Salary Range
KKR is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions. KKR aims to generate attractive investment returns by following a patient and disciplined investment approach, employing world-class people, and supporting growth in its portfolio companies and communities. KKR sponsors investment funds that invest in private equity, credit and real assets and has strategic partners that manage hedge funds. KKR’s insurance subsidiaries offer retirement, life and reinsurance products under the management of Global Atlantic Financial Group. References to KKR’s investments may include the activities of its sponsored funds and insurance subsidiaries.
TEAM OVERVIEW
The Global Security & Operational Resilience team provides 24/7 support across the Firm’s global operations, helping protect people, assets, and the continuity of critical business services. The ~80-member global team drives readiness through integrated physical security and investigations, threat and intelligence monitoring, crisis management, and enterprise operational resilience planning, exercising, and response.
POSITION SUMMARY
KKR is seeking a principal-level Head of Operational Resilience to lead the design, implementation, and execution of the firm’s global Operational Resilience program. Reporting to the Head of Security and Operational Resilience , this role is responsible for driving accountability and adherence to impact tolerance and recovery objectives during severe and plausible disruption by embedding requirements into day-to-day operations, operating effective controls, and leading remediation efforts to closure.
This role partners closely with Technology , Business leadership , Enterprise Risk Management , Compliance , Vendor management , Human Capital , and Internal Audit to maintain alignment with client, investor, and regulatory expectations and enterprise risk standards.
RESPONSIBILITIES
Key responsibilities include:
• Leadership & Operating Model
• Build, mentor, and lead a high-performing operational resilience team.
• Influence cross-functional stakeholders to deliver enterprise resilience outcomes and measurable program maturity.
• Program Ownership & Roadmap
• Own and operate KKR’s Operational Resilience program and multi-year roadmap, including associated procedures, playbooks, and evidence management.
• Establish and maintain governance routines to track progress, escalate risks, and drive timely decision-making.
• Important Business Services & Impact Tolerances
• Identify, maintain, and periodically review the inventory of Important Business Services (IBS) and support dependencies across people, processes, technology, data, facilities, and third parties.
• Define, document, and operationalize IBS impact tolerances with business leaders; ensure tolerances are measurable, actionable, and embedded in operating procedures and controls.
• Scenario Testing & Exercising
• Design and execute severe but plausible scenario testing and resilience exercises to validate the ability to remain within impact tolerances and recovery time objectives.
• Document outcomes, lessons learned, and resulting control enhancements; ensure improvements are implemented and sustained.
• Business Continuity Management
• Own and oversee the Business Continuity Management (BCM) program, including plan development, certification, governance, training/awareness, testing/exercises, and event execution.
• Control Effectiveness & Remediation
• Identify resilience gaps and drive remediation to closure with clear accountability, milestones, and risk transparency.
• Track remediation progress through governance forums and management reporting.
• Integrated Response & Recovery
• Coordinate resilience integration across crisis management, cyber incident response, technology disaster recovery, and physical security response to enable a unified enterprise response and recovery capability.
• Metrics, Reporting & Communication
• Establish and maintain resilience KPIs/KRIs, dashboards, and management reporting to communicate posture, key risks, and remediation status to senior leadership.
• Lead preparedness, communications, and awareness initiatives to strengthen resilience culture and improve adoption of planning and control requirements across global functions.
• Audit, Risk, and Regulatory Support
• Support regulatory reviews, risk assessments, and internal/external audits by providing timely documentation, evidence, and program narratives.
QUALIFICATIONS
• 10+ years of experience in operational resilience, business continuity, enterprise risk, or related disciplines; experience in financial services or similarly regulated environments preferred.
• Demonstrated experience leading enterprise-level resilience initiatives and driving cross-functional delivery in a global organization.
• Strong understanding of global regulatory expectations and industry standards (e.g., Basel, ISO 22301, NIST, PRA/FCA or comparable).
• Experience engaging with senior leadership during disruption events and managing complex stakeholder environments.
• Sector knowledge/experience in Insurance, Asset Management, Capital Markets, and Structuring processes.
CRITICAL COMPETENCIES FOR SUCCESS
• Executive presence with the ability to communicate resilience posture, trade-offs, and decisions clearly to senior leaders.
• Strong stakeholder management and influence across Technology, business functions, and control partners (ERM, Compliance, Audit).
• Program and change leadership: ability to build roadmaps, drive adoption, and deliver measurable outcomes across a global organization.
• Analytical rigor and diligence; ability to translate complex dependencies into practical controls and recovery strategies.
• Decisive leadership under pressure, including crisis response coordination and effective prioritization during disruption events.
• Strong writing and documentation capability; comfortable producing defensible evidence for audits and regulatory reviews.
• Continuous improvement orientation, including process enhancement, tooling modernization, and operational discipline.
#LI-HYBRID
This is the expected annual base salary range for this Boston-based position. Actual salaries may vary based on factors, such as skill, experience, and qualification for the role. Employees may be eligible for a discretionary bonus, based on factors such as individual and team performance.
Base Salary Range
90,000 —
30,000 USD
KKR is an equal opportunity employer. Individuals seeking employment are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, sexual orientation, or any other category protected by applicable law.
KKR will provide reasonable accommodations as required by applicable federal, state, and/or local laws. Individuals seeking an accommodation for the application or interview process should email Benefits@kkr.com . Emails sent for unrelated issues, such as following up on an application, will not receive a response.
If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access https://www.kkr.com/careers because of your disability. You can request reasonable accommodations by sending an email to Benefits@kkr.com . Only emails left for this purpose will be returned.
Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. This notice applies only to applicants and employees who work or will work in Massachusetts, in accordance with applicable state law.
Careeroza — One-stop Zone for Aspirants
Study material, Careeroza mentorship, tech jobs, and career guidance on careeroza.com.
Public study materials
- Express.js — Web APIs & middleware (expressjs)
- Application setup · basic
- Routing deep dive · basic
- 1. MVC / Layered Architecture · medium
- Validation · medium
- File uploads · medium
- Sessions & auth (stateful) · medium
- Passport & strategies · medium
- Templating & SSR · medium
- WebSockets & SSE · medium
- Security middleware · advance
- Reverse proxies & trust · advance
- Performance · advance
- API design & versioning · advance
- Testing with Supertest · advance
- GraphQL & tRPC (overview) · advance
- Deployment checklist · advance
- Middlewares · basic
- Request & Response · basic
- AWS Crash Course (AWS)
- What is Cloud ? · basic
- What is AWS ? · basic
- If not cloud ? · basic
- Cloud Computing · basic
- AWS Pricing · basic
- AWS Shared Responsibility Model · basic
- AWS Management Console · basic
- AWS SDKs · basic
- AWS IAM · medium
- Users, Groups, Roles · medium
- Policies · medium
- AWS Organizations · medium
- AWS Cognito · medium
- AWS Directory Service · medium
- AWS KMS (Key Management Service) · medium
- AWS Secrets Manager · medium
- AWS Shield · medium
- AWS WAF · medium
- AWS Inspector · medium
- AWS GuardDuty · medium
- EC2 · advance
- Launching EC2 Instances · advance
- EBS Volumes · advance
- Security Groups · advance
- Key Pairs · advance
- Elastic IP · advance
- User Data Scripts · advance
- Auto Scaling · advance
- Load Balancers · advance
- ALB · advance
- NLB · advance
- Serverless Compute ,AWS Lambda, Lambda Layers · advance
- Event-Driven Architecture · advance
- ECS · advance
- EKS · advance
- Django (Django)
- What is Django · basic
- Installing Django · basic
- Features of Django · basic
- MVT Architecture · basic
- Django vs Flask · basic
- Creating Project & Creating App · basic
- Django Project Structure · basic
- URL Routing · basic
- Views · basic
- Templates · basic
- Static & Media Files · medium
- Models · medium
- ORM (Object Relational Mapping) · medium
- Model Relationships · medium
- Migrations · medium
- Django Admin · medium
- Forms · medium
- Authentication · medium
- Authorization · medium
- Middleware · medium
- Signals · medium
- Class Based Views Deep Dive · advance
- Generic Views · advance
- File Handling · advance
- Django REST Framework (DRF) · advance
- Advanced ORM · advance
- Caching · advance
- Asynchronous Django · advance
- Background Tasks · advance
- Interview Questions · interview-questions
- System Designing (System Designing)
- Day-1 : What is system Designing ? · basic
- Day-2 : Vertical vs. Horizontal Scaling · basic
- Day-3:How to do vertical scaling ? · basic
- Day4:How to do horizaontal scaling ? · basic
- Day:5TCP vs UDP · basic
- Day6:IP & DNS · basic
- Day7:Client-Server Model · basic
- Day8:HTTP & HTTPS · basic
- Databases (SQL vs NoSQL) · medium
- Caching · medium
- Day9:Latency & Throughput · basic
- Load Balancing · medium
- Indexes & Query Optimization · medium
- CDN · medium
- Proxies · medium
- Message Queues · medium
- Horizontal vs Vertical Scaling · medium
- Database Replication · advance
- Database Sharding · advance
- Consistent Hashing · advance
- CAP Theorem · advance
- Rate Limiting · advance
- Service Discovery · advance
- Event-Driven Architecture · advance
- API Gateway · advance
- Distributed Consensus · expert
- Microservices · expert
- Observability · expert
- Idempotency · expert
- PACELC Theorem · expert
- Two-Phase Commit · expert
- Back-of-Envelope Estimation · expert
- Designing for Failure · expert
- Node.js — Server-side JavaScript (nodejs)
- Getting started · basic
- JavaScript on the server · basic
- CommonJS modules · basic
- ES modules (ESM) · basic
- npm & package management · basic
- Asynchronous JavaScript in Node · basic
- The event loop · basic
- Essential core utilities · basic
- process & configuration · basic
- File system basics · basic
- HTTP & HTTPS servers · medium
- Streams · medium
- Events & EventEmitter · medium
- Advanced filesystem · medium
- crypto · medium
- Compression & encoding · medium
- Child processes · medium
- net, dgram & DNS · medium
- readline, timers & scheduling · medium
- Testing & diagnostics (intro) · medium
- Worker threads · advance
- cluster & multi-process scaling · advance
- Performance & tuning · advance
- Debugging & observability · advance
- Security hardening · advance
- Native addons & N-API · advance
- Architecture patterns · advance
- Graceful shutdown · advance
- 100 Questions · interview questions
- Python (Python)
- Python Fundamentals · basic
- Control Flow · basic
- Strings · basic
- Collections / Data Structures · basic
- Functions · basic
- Modules and Packages · basic
- File Handling · basic
- Exception Handling · basic
- Object-Oriented Programming (OOP · medium
- Advanced Python Concepts · advance
- Functional Programming · advance
- Multithreading & Multiprocessing · advance
- Async Programming · advance
- JavaScript (JavaScript)
- JS Introduction · basic
- Variables & Data Types · basic
- Operators · basic
- Control Flow · basic
- Functions · basic
- Scope & Execution · basic
- Closures · basic
- Objects · basic
- Arrays · basic
- Strings · basic
- DOM Manipulation · basic
- Browser APIs · medium
- Asynchronous JavaScript · medium
- Fetch & APIs · medium
- ES6+ Features · medium
- OOP in JavaScript · medium
- Prototype & Inheritance · advance
- Advanced Functions · advance
- Memory Management · advance
- Error Handling · advance
- Modules · advance
- Advanced Async Concepts · advance
- Functional Programming · advance
- JavaScript Internals · advance
- Performance Optimization · advance
- MongoDB — Documents & data modeling (MongoDB)
- Introduction · basic
- Shell, Compass & tools · basic
- Databases & collections · basic
- CRUD operations · basic
- Indexes deep dive · medium
- Explain plans & performance · medium
- Aggregation framework · medium
- Schema design patterns · medium
- Mongoose basics · medium
- Mongoose advanced · medium
- Drivers & connection · medium
- Operators for updates & arrays · medium
- Replication & read preferences · advance
- Write concern & read concern · advance
- Multi-document transactions · advance
- Change streams · advance
- Sharding (overview) · advance
- Atlas Search & full-text · advance
- GridFS & large files · advance
- Backup, restore & ops · advance
- SQL (SQL)
- SQL Fundamentals · basic
- Database Operations · basic
- Table Operations · basic
- CRUD Operations · basic
- Filtering & Operators · basic
- SQL Functions · basic
- GROUPING Data · basic
- Joins · medium
- Constraints · basic
- Subqueries · medium
- Set Operators · medium
- Views · medium
- Indexes · medium
- Normalization · advance
- Transactions · advance
- Stored Procedures & Functions · advance
- Triggers · advance
- Advanced SQL · advance
- Query Optimization · advance
- Database Design · advance
- SQL Security · advance
- Backup & Recovery · advance
- Questions · interview questions
- System Architecture (System Architecture)
- Fundamentals of System Architecture · basic
- Distributed System Basics · basic
- System Reliability Concepts · basic
- Scaling Concepts · basic
- Networking Basics · basic
- Web Communication · basic
- API Communication · basic
- Proxy & Delivery Systems · basic
- Web Architecture Basics · basic
- Rendering Architectures · basic
- Frontend Advanced Concepts · basic
- Message Queue Basics · medium
- What is Load Balancer · medium
- Load Balancing Algorithms · medium
- API Design Basics · medium
- API Protection · medium
- Authentication Basics · medium
- Security Tokens · medium
- Security Threats · medium
- Encryption & Security · medium
- SQL Database Basics · medium
- SQL Scaling Concepts · medium
- NoSQL Databases · medium
- Database Optimization · medium
- Replication Strategies · medium
- Caching Basics · medium
- Cache Storage Systems · medium
- Cache Strategies · medium
- Event-Driven Systems · advance
- Queue Reliability · advance
- Microservices Basics · advance
- Microservice Communication · advance
- Distributed Transactions · advance
- DevOps Basics · advance
- Automation Tools · advance
- Deployment Strategies · advance
- Monitoring Basics · advance
- Monitoring Tools · advance
- Distributed System Concepts · advance
- Distributed Algorithms · advance
- Angular (Angular)
- Angular Fundamentals · basic
- Project Structure · basic
- Components & Templates · basic
- Data Binding · basic
- Directives · basic
- Pipes · basic
- Component Communication · basic
- Lifecycle Hooks · basic
- Routing Basics · basic
- Routing · basic
- API Calls · basic
- Forms · medium
- Routing · medium
- Services & Dependency Injection · medium
- RxJS & Observables · medium
- Authentication & Security · medium
- Component Interaction · medium
- State Management Basics · medium
- Error Handiling · medium
- Perfomance Basic · medium
- Real World Features · medium
- Advanced Angular Architecture · advance
- Change Detection · advance
- Advanced RxJS · advance
- State Management · advance
- Dynamic Rendering · advance
- Perfomance Optimization · advance
- Modern Angular · advance
- STAR (Situation, Task, Action, and Result) (Situation Based Questions)
KKR is an equal opportunity employer. Individuals seeking employment are considered without regard to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, sexual orientation, or any other category protected by applicable law.
KKR will provide reasonable accommodations as required by applicable federal, state, and/or local laws. Individuals seeking an accommodation for the application or interview process should email Benefits@kkr.com . Emails sent for unrelated issues, such as following up on an application, will not receive a response.
If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to use or access https://www.kkr.com/careers because of your disability. You can request reasonable accommodations by sending an email to Benefits@kkr.com . Only emails left for this purpose will be returned.
Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. This notice applies only to applicants and employees who work or will work in Massachusetts, in accordance with applicable state law.