Senior Cybersecurity/IT Risk Consultant – DORA Compliance

Keoni; Paris; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Keoni is seeking a Senior GRC/IT Risk/Cybersecurity Consultant to support a banking-focused group in addressing DORA Pillar 1 compliance across entities. The role emphasizes governance, risk assessment, and KPI-driven monitoring.

The consultant will lead remediation plans, dashboards, and consolidation of results, ensuring sustainable RUN-time compliance at Group level.

Qualifications

• Senior GRC/IT risk/cybersecurity experience in the banking sector.
• Direct involvement with IT regulatory compliance projects (DORA).
• Ability to develop action plans, KPIs and reporting at Group level.

Responsibilities

• Evaluate Pillar 1 DORA compliance – LoD1/LoD2 across entities.
• Identify gaps, document non-conformities and remediation plans.
• Develop Group-level KPIs, dashboards and reporting mechanisms.
• Consolidate results and monitor ongoing compliance.

Skills

Information Systems Security

IT Risk Management

GRC & Compliance

DORA Knowledge

KPI Dashboards

Stakeholder Reporting

Job description

Context: Consulting in project security support, with over 9 years of experience. As part of the Group's compliance with DORA regulatory requirements, our client is seeking a senior cybersecurity/IT risk/regulatory compliance consultant to support the team. The main objective is to assess and manage the compliance of the Group's various entities with DORA Pillar 1, at LoD1/LoD2 levels, and then implement a consolidated system to ensure ongoing monitoring of this compliance. The role therefore includes a strong GRC/compliance/IT risk component, as well as significant management, KPI, reporting, and Group action plan aspects.Main Responsibilities : The consultant will be responsible for: • Evaluating the compliance of the various entities with Pillar 1 of DORA – LoD1 / LoD2. • Identifying and documenting gaps and non-conformities. • Developing action plans to address the identified gaps. • Streamlining the various local and Group action plans. • Monitoring their progress. • Defining and implementing DORA compliance KPIs at the Group level. • Developing dashboards and reporting mechanisms. • Consolidating information from the various entities. • Ensuring systematic compliance monitoring. • Implementing a sustainable RUN system to ensure ongoing DORA compliance monitoring.Key skills: • Information systems security. • IT risk management. • Information security governance and compliance. • Sound knowledge of regulations applicable to the banking sector. • Knowledge of DORA. • Compliance assessment and gap identification. • Development and monitoring of remediation plans. • Definition and monitoring of KPIs. • Reporting and dashboards. • Ability to consolidate information from multiple entities.Information Systems Security (ISS) / Risks: Beyond DORA, the ideal candidate will be a consultant capable of supporting business units and projects in identifying security requirements and associated risks, and then in defining measures to mitigate these risks. Specific expertise in information systems security and IT risks is required, as well as knowledge of the banking sector and regulations, particularly DORA. The role will involve activities such as information systems security risk analysis, defining security requirements, and supporting projects on security issues.Ideal candidate profile: Senior GRC/IT Risk/Cybersecurity Consultant with over 9 years of experience, possessing essential and significant experience in the banking or financial sector. The ideal candidate will have prior experience working on IT regulatory compliance, ideally directly with DORA: gap analysis, LoD1/LoD2 controls, non-conformity identification, remediation plans, KPIs, and compliance reporting. Experience within a large banking group with multiple entities would be particularly relevant given the need to consolidate results at the Group level. The consultant's ability to transition from a project/compliance approach to defining a sustainable operational framework is also highly valued, as this is explicitly expected of the role.Application: CV + cover letter + copies of diplomas to be sent to [e-mail]