DORA Governance & TPRM Lead - ICT Risk

Capco; Milano; On-site; EUR 26,000 - 32,000; Full time

Benefits offered by this job

Health benefits

Meal vouchers

Welfare allowance

Learning platforms

Job summary

Capco in Milan is seeking a DORA Governance & TPRM Specialist to join our consulting team. You will define and evolve ICT risk management frameworks, monitor outsourcing arrangements, and contribute to the ICT Third-Party Risk Management program.

You will collaborate with cross-functional teams, produce dashboards for senior stakeholders, and support policy development related to digital resilience. A 3–6 year background in ICT governance or risk and relevant certifications is preferred.

Qualifications

• Bachelor’s degree in economics, engineering, law or related field.
• 3–6 years in ICT governance, risk/compliance, and third-party risk management.
• Knowledge of Digital Operational Resilience Act (DORA).
• Experience drafting regulatory documentation.
• Strong analytical and communication skills.
• Ability to interact with multiple stakeholders across functions.

Responsibilities

• Define, implement, and evolve the Digital Operational Resilience framework in line with DORA, including governance and reporting.
• Monitor ICT and third-party risks, focusing on outsourcing arrangements.
• Contribute to the ICT Third-Party Risk Management framework with risk assessment and due diligence.
• Support ICT risk management within the ERM framework and controls.
• Maintain RoI data quality for ICT services and providers.
• Support ICT policy development related to risk and digital resilience.
• Prepare ICT risk dashboards for senior stakeholders.
• Collaborate with cross-functional teams on digital resilience initiatives.

Skills

ICT Governance

Risk & Compliance

Operational Resilience

Third-Party Risk Management

Stakeholder communication

Education

Bachelor's degree

Tools

CRISC

CISA

CISM

ISO 27001

ISO 22301

Job description

Capco in Milan is seeking a DORA Governance & TPRM Specialist to join our consulting team. You will define and evolve ICT risk management frameworks, monitor outsourcing arrangements, and contribute to the ICT Third-Party Risk Management program.

You will collaborate with cross-functional teams, produce dashboards for senior stakeholders, and support policy development related to digital resilience. A 3–6 year background in ICT governance or risk and relevant certifications is preferred.