Regulatory Remediation Programme Manager (DORA)

Arcus Search; Greater London; Hybrid; GBP 96,000 - 165,000; Full time

Job summary

Arcus Search is seeking an experienced contract-based Regulatory Remediation Programme Manager to lead DORA procurement and supplier management activities. You will coordinate cross-functional teams across Procurement, Legal, Risk, Operational Resilience, Technology and Business stakeholders to implement regulatory obligations and evidence them into BAU operations.

The role requires a track record delivering large-scale regulatory remediation programmes in financial services, with deep knowledge

Qualifications

• 10+ years in procurement or supplier management or regulatory change projects.
• Experience delivering regulatory remediation programmes in financial services.
• Deep understanding of DORA and outsourcing guidelines.
• Experience coordinating cross-functional teams with regulators and auditors.

Responsibilities

• Lead end-to-end DORA procurement workstreams and remediation.
• Coordinate ICT contract uplift, ROI remediation and supplier classification.
• Lead CIF supplier assessments and materiality reviews.
• Oversee supplier governance, exit planning and enforcement of controls.
• Prepare regulatory evidence and audit materials with Legal and Risk.
• Drive governance forums and executive reporting to regulators.

Skills

Procurement

Third-Party Risk Management

Regulatory remediation

Stakeholder management

PMO leadership

Executive reporting

Job description

Regulatory Remediation Programme Manager (DORA)

Job type: Contract

Location: London (Hybrid)

IR35 status: INSIDE IR5

Rate: Market rate

Job Description

We are seeking an experienced contractor to lead the delivery of procurement and supplier management regulatory remediation activities under the Digital Operational Resilience Act (DORA) and related regulatory frameworks.

The successful candidate will have a proven track record delivering large-scale regulatory remediation programmes involving third-party risk management, outsourcing governance, procurement controls, contractual remediation, supplier due diligence, operational resilience, cloud governance and regulatory compliance.

This role will coordinate multiple workstreams across Procurement, Legal, Risk, Operational Resilience, Technology and Business stakeholders to ensure regulatory obligations are implemented, evidenced and embedded into business-as-usual operations.

Key Responsibilities

DORA Regulatory Remediation

Lead end-to-end delivery of procurement-related DORA workstreams including:

• ICT third-party contract uplift programmes
• Register of Information (ROI) remediation and data quality improvement
• Supplier inventory and regulatory classification exercises
• Critical and important function (CIF) supplier assessments
• Supplier tiering and materiality reviews
• Operational resilience requirements relating to suppliers
• Regulatory evidence collection and audit preparation

Contract Remediation

Drive remediation of supplier agreements to ensure compliance with DORA contractual requirements, including:

• Audit and access rights
• Regulatory inspection rights
• Subcontracting provisions
• Material change notification requirements
• Data location and processing requirements
• Exit assistance obligations
• Termination rights
• Business continuity and resilience requirements
• Incident management obligations

Coordinate with Legal, Procurement and suppliers to negotiate and track remediation completion.

Register of Information (ROI)

Lead delivery of DORA Register of Information obligations, including:

• Data collection from internal and supplier sources
• Supplier classification and mapping
• Identification of critical providers
• Governance and ownership model establishment
• Regulatory reporting readiness

Subcontractor Governance

Establish and manage subcontractor governance processes including:

• Collection of subcontractor declarations
• Supply chain visibility and mapping
• Identification of material subcontractors
• Development of KPI/KRI reporting
• Regulatory evidence management

Exit Planning

Coordinate supplier exit planning activities including:

• Gap analysis and remediation
• Ownership and accountability tracking
• Exit testing readiness
• Regulatory evidence collection

Work with service owners and business stakeholders to ensure supplier exit plans are developed, maintained and owned by the accountable business functions.

Governance & Stakeholder Management

• Lead steering committees and working groups
• Produce executive and regulatory reporting
• Track remediation milestones, actions, risks and dependencies
• Challenge delivery teams where progress is insufficient
• Prepare materials for regulators, internal audit and risk committees

Required Experience

• 10+ years' experience in procurement, supplier management, outsourcing governance or regulatory change programmes
• Proven delivery of regulatory remediation programmes within financial services
• Deep understanding of:
• DORA
• EBA Outsourcing Guidelines
• EBA ICT & Security Risk Guidelines
• Operational Resilience regulations
• Third-Party Risk Management frameworks
• Experience leading contract remediation and uplift programmes
• Experience dealing with regulators, internal audit and second-line risk functions
• Demonstrable experience implementing:
• Supplier governance frameworks
• Registers of Information
• Outsourcing registers
• Exit planning frameworks
• Subcontractor oversight frameworks
• Experience working with Procurement, Legal, Risk and Technology teams simultaneously

Highly Desirable

• Experience implementing DORA in a European financial institution
• Experience with ECB, NBB, FCA, PRA, EBA or equivalent regulatory programmes
• Experience with Schrems II remediation and cross-border data transfer assessments
• Experience with cloud service provider regulatory compliance programmes
• Experience within securities, banking, payments or financial market infrastructure organisations

Required Skills

Regulatory

• DORA
• EBA Outsourcing Guidelines
• Operational Resilience
• ICT Third Party Risk Management
• GDPR
• Outsourcing Governance

Procurement

• Strategic sourcing
• Contract remediation

Delivery

• Regulatory change management
• PMO leadership
• Executive reporting

The contractor will be expected to demonstrate successful delivery of:

• DORA contract uplift programme
• Complete and regulator-ready Register of Information
• Subcontractor governance framework and reporting
• Supplier exit planning inventory and remediation roadmap
• Executive and regulatory reporting packs
• Closure of regulatory findings and remediation actions
• Sustainable BAU governance model

Ideal Candidate Profile

A former regulatory remediation lead from organisations such as:

• Euroclear
• SWIFT
• Clearstream
• SIX
• LSEG
• ECB-regulated bank
• Big Four regulatory advisory practice (PwC, Deloitte, EY, KPMG)

The ideal individual is not a generic project manager but somebody who has already delivered regulatory third-party risk remediation programmes and can immediately challenge requirements, engage regulators, manage suppliers and drive complex cross-functional delivery with minimal supervision.