DORA Governance & TPRM Specialist

Capco; Milano; On-site; EUR 26,000 - 32,000; Full time

Benefits offered by this job

Health benefits

Meal vouchers

Welfare allowance

Learning platforms

Job summary

Capco in Milan is seeking a DORA Governance & TPRM Specialist to join our consulting team. You will define and evolve ICT risk management frameworks, monitor outsourcing arrangements, and contribute to the ICT Third-Party Risk Management program.

You will collaborate with cross-functional teams, produce dashboards for senior stakeholders, and support policy development related to digital resilience. A 3–6 year background in ICT governance or risk and relevant certifications is preferred.

Qualifications

• Bachelor’s degree in economics, engineering, law or related field.
• 3–6 years in ICT governance, risk/compliance, and third-party risk management.
• Knowledge of Digital Operational Resilience Act (DORA).
• Experience drafting regulatory documentation.
• Strong analytical and communication skills.
• Ability to interact with multiple stakeholders across functions.

Responsibilities

• Define, implement, and evolve the Digital Operational Resilience framework in line with DORA, including governance and reporting.
• Monitor ICT and third-party risks, focusing on outsourcing arrangements.
• Contribute to the ICT Third-Party Risk Management framework with risk assessment and due diligence.
• Support ICT risk management within the ERM framework and controls.
• Maintain RoI data quality for ICT services and providers.
• Support ICT policy development related to risk and digital resilience.
• Prepare ICT risk dashboards for senior stakeholders.
• Collaborate with cross-functional teams on digital resilience initiatives.

Skills

ICT Governance

Risk & Compliance

Operational Resilience

Third-Party Risk Management

Stakeholder communication

Education

Bachelor's degree

Tools

CRISC

CISA

CISM

ISO 27001

ISO 22301

Job description

Joining Capco means joining an organization that is committed to an inclusive working environment where you’re encouraged to #BeYourselfAtWork. We celebrate individuality and recognize that diversity and inclusion, in all forms, is critical to success. It’s important to us that we recruit and develop as diverse a range of talent as we can, and we believe that everyone brings something different to the table – so we’d love to know what makes you different. Such differences may mean we need to make changes to our process to allow you the best possible platform to succeed, and we are happy to cater to any reasonable adjustments you may require. You will find the section to let us know of these at the bottom of your application form or you can mention it directly to your recruiter at any stage and they will be happy to help.

About Capco

Capco is a global technology and business consultancy, focused on the financial services sector. We are growing at fast pace in our Italian office, the opportunity for growth is large, accessible, and immediate. We are passionate about helping our clients succeed in an ever-changing industry. Capco is going through a significant growth journey, now is a very good time to join us as we expand our consulting team in Italy.

Role Description

As part of the consulting team, the DORA Governance & TPRM Specialist will:

• Support the definition, implementation, and evolution of the Digital Operational Resilience framework in line with DORA, including governance, roles, responsibilities, and reporting
• Monitor and manage ICT and third-party risks, with a focus on service providers and outsourcing arrangements
• Contribute to the ICT Third-Party Risk Management (TPRM) framework, including risk assessment, due diligence, and ongoing supplier monitoring
• Support second line of defense activities within the ERM framework (e.g., KRI, RAF, controls), focusing on ICT and security risks
• Maintain and update the Register of Information (RoI), ensuring data quality and completeness of ICT services and providers
• Support the definition and maintenance of policies and procedures related to ICT risk, digital resilience, and third-party management
• Contribute to the ICT Risk Appetite Framework, including indicators, thresholds, and escalation mechanisms
• Support ICT incident management oversight and remediation processes
• Prepare reporting and dashboards to communicate ICT and third-party risk exposure to senior stakeholders
• Collaborate with cross-functional teams to ensure alignment on digital resilience initiatives

Skills and Experience

To qualify for the role you must have:

• Bachelor’s degree in economics, engineering, law or related fields
• 3–6 years of experience in ICT Governance / Risk & Compliance / Operational Resilience / Third Party Risk Management, and consulting
• Good knowledge of Digital Operational Resilience Act (DORA) and ICT risk management frameworks
• Understanding of ICT outsourcing and third-party risk management processes
• Experience in drafting policies, procedures and regulatory documentation
• Strong analytical skills and excellent communication skills
• Ability to interact with multiple stakeholders across different functions

Nice to have:

• Professional certifications (e.g. CRISC, CISA, CISM, ISO 27001, ISO 22301)
• Experience in financial services or insurance sector

Why join Capco?

You will work on engaging projects with some of the largest banks in the world, on projects that will transform the financial services industry.

We offer a competitive, people-first benefits package designed to support every aspect of your life:

• Comprehensive health benefit coverage
• Meal Vouchers
• Welfare allowance
• Access to internal and Tier 1 learning platforms

In Capco you will find:

• A work culture focused on innovation and building lasting value for our clients and employees
• Ongoing learning opportunities to help you acquire new skills or deepen existing expertise
• A flat, non-hierarchical structure that will enable you to work with senior partners and directly with clients
• A diverse, inclusive, meritocratic culture

Pay Transparency

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies are designed to allow our people to progress through our defined salary range over time as they progress in their role.

The minimum gross annual base salary for this position is from €29.000. The final offer could be higher to reflect the candidate’s experience, skills, and overall fit for the role. Additionally, this position may also be eligible to receive a discretionary/variable bonus payment.

Location

Piazza Gae Aulenti 1, Milan (Garibaldi FS/MM Garibaldi)