Manager, ICT GRC and Digital Operational Resilience (DORA)

Raymond James Financial; United Kingdom; On-site; GBP 70,000 - 90,000; Full time

Job summary

A financial services company is seeking a Manager for ICT Governance, Risk, and Compliance (GRC) and Digital Operational Resilience (DORA). The ideal candidate will be responsible for developing and managing ICT risk management programs, ensuring compliance with regulations across the UK, Germany, and France. Strong technical guidance and coordination across jurisdictions are required, along with project management and communication skills. This position offers an opportunity to work in a dynamic environment and make substantial impacts on organizational resilience.

Qualifications

• Ability to coordinate across business units and jurisdictions.
• Strong communication and influencing skills.
• Experience in creating reports and recommendations for stakeholders.

Responsibilities

• Design ICT risk management frameworks and compliance policies.
• Coordinate resilience testing programs for ICT and third parties.
• Prepare reports for regulators and manage audit reviews.
• Monitor regulatory updates and adjust program design.

Skills

Technical guidance on regulatory compliance

Operational resilience skills

ICT risk management

Project management

Communication skills

Analytical skills

Job description

Job Description - Manager, ICT GRC and Digital Operational Resilience (DORA) (2500634)

Job Description

Manager, ICT GRC and Digital Operational Resilience (DORA) - 2500634

Description

Job Profile Summary:

Responsible for designing, structuring, and overseeing ICT Risk Management programme, including the Digital Operational Resilience Act (DORA) program across Germany, France, and the UK. Ensures the organization is compliant with EU/UK operational resilience requirements and aligned to industry best practices.

Job Description

Develop, implement, and manage the organization’s ICT risk management program within the Governance, Risk & Compliance (GRC) function, including fulfilling DORA requirements. Ensure compliance with regulatory requirements in Germany, France, and the UK, with a focus on ICT risk, third-party oversight, and operational resilience testing.

Collaborate with the Business, 1LOD (Technology teams), and 2LOD (Risk, Compliance, Information Compliance Risk Management ‘ICRM’) to embed resilience controls into processes and reporting, and to monitor effectiveness of the above programs.

Key responsibilities include:

• Establishing ICT risk management and governance frameworks, policies, standards and procedures to comply with DORA and related regulations.
• Designing and coordinating resilience testing programs, including ICT and third-party testing.
• Partnering with vendor management to ensure compliance with third‑party oversight obligations including oversight of controls and testing.
• Preparing reporting for regulators, senior management, and governance committees, coordinating for internal and external audit reviews.
• Monitoring regulatory updates across multiple jurisdictions and adjusting program design accordingly.
• Serving as a liaison with German, French, and UK business units to ensure alignment and consistency.

Qualifications

Skills

Works independently and provides technical guidance when required on regulatory compliance, operational resilience, and ICT risk management. Strong ability to coordinate across business units and jurisdictions. Applies project management, communication, and analytical skills to structure and oversee complex regulatory programs. Demonstrates clear communication, influencing skills, and ability to create effective reports and recommendations for stakeholders at multiple levels.