ICT Third-Party Risk Lead (DORA) | Regulated FinTech

Hub; Aarhus; On-site; DKK 850,000 - 1,100,000; Full time

Benefits offered by this job

4 days in the office

Latest equipment

Pension & health insurance

Job summary

Lunar is building the future of financial life with AI at the core. The Third Party Risk Management Specialist will own vendor risk across the lifecycle, ensuring DORA compliance and contract clarity while collaborating with Legal, Procurement and ICT teams in Aarhus.

Ideal candidates will have 3–5 years in vendor/contract risk, a law/business background, and a strong ability to communicate with engineers and stakeholders in English. Danish language skills are a plus.

Qualifications

• 3-5 years of experience in vendor management, contract management, outsourcing, procurement or third party risk, with a large share on ICT or technology vendors.
• Background in law, business, contract management or vendor management, e.g. cand.merc.jur. or similar.
• Working knowledge of DORA ICT third party risk requirements and EBA outsourcing guidelines, or experience from a regulated sector.
• Ability to read contracts, identify missing elements, manage vendors pre- and post-signature, discuss cloud, SaaS, data location, and assurance reports.
• Fluent in English; Danish or another Scandinavian language is a strong plus.

Responsibilities

• Assess before we sign: risk classifications, due diligence and risk assessments for ICT services.
• Set contract requirements with Legal, including DORA Article 30 terms, SLAs and exit rights.
• Follow up after signing: track SLAs, conduct vendor reviews and monitor ICT incidents and assurance reports.
• Maintain the DORA information register and ICT concentration risk inputs; ensure exit strategies.
• Engage with management and stakeholders to improve the risk management process.

Skills

Vendor management

Contract management

Outsourcing

Procurement

ICT risk

Education

cand.merc.jur.

Tools

ISAE 3402

SOC 2

Job description

Lunar is building the future of financial life with AI at the core. The Third Party Risk Management Specialist will own vendor risk across the lifecycle, ensuring DORA compliance and contract clarity while collaborating with Legal, Procurement and ICT teams in Aarhus.

Ideal candidates will have 3–5 years in vendor/contract risk, a law/business background, and a strong ability to communicate with engineers and stakeholders in English. Danish language skills are a plus.