Board Director for Mobility Technology and Cyber Resilience

What to bring

Candidates should have senior operating or board experience with technology that supports time-sensitive physical services. They need to understand how corporate systems, operational equipment and external providers interact. Evidence should include a consequential resilience decision where commercial pressure and technical risk were in tension, and an explanation of how uncertainty was communicated.

Scrutiny through realistic disruption

Challenge management using scenarios that cross organisational boundaries: loss of a shared identity service, compromise of a maintenance supplier, unreliable operational data or failure of a customer-facing platform during peak demand. Ask which services can continue, what decisions require specialist safety input and how customers will receive accurate information.

Review the assumptions behind recovery targets and the evidence from exercises. A recovery plan is credible only if people, access, equipment and external dependencies are available when needed. Examine whether investment priorities reflect the consequences of interruption rather than the visibility of the latest threat.

The board's interventions

Contribute to risk appetite, major technology investment and oversight of resilience capability. Seek assurance that incidents produce lasting changes and that known weaknesses are not repeatedly accepted without clear ownership. Consider how acquisitions, new services or connected equipment alter the enterprise's exposure.

The director will avoid taking over operational decisions or instructing technical teams. Management must retain clear incident authority, with board escalation defined in advance. Appointment and any committee duties depend on the actual entity's governance requirements and an assessment of independence and conflicts.

Signs of a stronger governance system

Board information should show critical dependencies, meaningful readiness evidence and the consequences of unresolved decisions. Effective contribution helps leadership make proportionate investments and maintain a realistic understanding of service continuity. The desired outcome is a business that can respond coherently when technology fails, rather than one whose assurance depends on the absence of a recent incident.