Regulatory Analyst – DORA – 11212SR

Proactive.IT Appointments Limited; City Of London; Hybrid; GBP 65,000 - 75,000; Full time

Job summary

A leading financial services organisation is looking for a Regulatory Analyst specializing in Digital Operational Resilience (DORA) and European cyber regulations. The role entails driving DORA implementation and working closely with operational teams to ensure compliance. Ideal candidates should have a relevant degree and expertise in DORA and NIS2 regulations, along with key certifications. This position is hybrid and offers a salary between £65k and £75k per year.

Qualifications

• Strong knowledge of DORA, NIS2, and UK/EU cyber regulations.
• Recognised certifications such as CISSP, CISM, CISA, CRISC, CTPRP.
• Proven background in information security, audit, or risk management.

Responsibilities

• Lead gap analyses for DORA compliance.
• Develop policies aligned with regulatory requirements.
• Support ongoing control maintenance and audits.

Skills

Analytical skills

Stakeholder management

Problem solving

Financial services awareness

Education

Degree in IT, Information Security, Risk Management

Tools

ISO27001

NIST

COBIT

CAF

Job description

Overview

11212SR
£65k – 75k per year

Regulatory Analyst – DORA

Hybrid

Our client, a leading financial services organisation, is seeking a Regulatory Analyst with strong expertise in Digital Operational Resilience (DORA) and European cyber regulations.

As a subject matter expert, you will drive DORA implementation, collaborate with operational resilience teams, and influence policies, controls, and risk frameworks to safeguard critical business services.

Key Responsibilities

Regulatory Assurance (DORA):

• Lead gap analyses and implement solutions to ensure full DORA compliance.
• Embed DORA’s six pillars: ICT Risk Management, Incident Reporting, Resilience Testing, Information Sharing, Third Party Risk, and Governance.
• Collaborate with operational resilience and business continuity teams.
• Design and execute testing initiatives to measure cyber and digital resilience.
• Assess third-party resilience as part of TPRM efforts.
• Partner with IT and Risk stakeholders on cross-functional initiatives.
• Act as a subject matter expert and champion of digital resilience.

Policies & Standards:

• Develop and evolve policies to align with both local and enterprise-wide regulatory requirements.
• Contribute to the information security policy framework.

Governance & Controls:

• Support ongoing control maintenance and internal audits.
• Work with stakeholders to assess risk and strengthen mitigation strategies.
• Build deep expertise around regulated business services.

What You Bring

Expertise & Education:

• Degree in IT, Information Security, Risk Management or a related field.
• Strong knowledge of DORA, NIS2, and UK/EU cyber regulations.
• Familiarity with frameworks: ISO27001, NIST, COBIT, CAF.
• Recognised certifications such as CISSP, CISM, CISA, CRISC, CTPRP.
• Experience with European financial regulations (BaFin, AMF, etc.).
• Proven background in information security, audit, or risk management.

Skills & Traits:

• Financial services experience with strong awareness of cybersecurity trends.
• Proactive problem solver with excellent analytical skills.
• Collaborative with strong stakeholder management abilities.
• Willingness to travel within Europe.

Regulatory Analyst – DORA

Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.

Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation

We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website http://proactive.it/privacy-notice/