Digital Resilience & IT Risk Lead (DORA)

Neema - Better Than a Bank; Nederland; Hybrid; EUR 140,000 - 180,000; Full time

Job summary

Neema is seeking a hands-on leader to own the Digital Operational Resilience Act (DORA) framework and IT risk management for the EMI. You will report to the CEO of Neema EU and act as the bridge between technology delivery, risk/compliance, and Dutch regulators (DNB and AP).

The role is based in Amsterdam with a hybrid arrangement and is an important first-line capability within GRC. You will author policies and maintain registers, run assurance programs over ICT providers, and prepare for

Qualifications

• Fintech/payments expertise within financial services is essential.
• End-to-end IT risk management framework experience.
• Hands-on DORA implementation across ICT risk, third-party risk and information registers.
• Experience auditing or assuring ICT service providers.
• Familiar with DNB expectations and supervisory correspondence.
• Strong analytical and stakeholder communication skills in English.

Responsibilities

• Own the ICT risk management framework in line with DORA and regulatory requirements.
• Manage the IT risk register, assessments, appetite and remediation tracking.
• Determine critical/important functions under DORA and define scope and testing.
• Maintain control framework mapping and report risk indicators to Management Committee.
• Lead third-party ICT risk governance and oversee provider assurance programs.
• Coordinate incident management, regulatory reporting to DNB and lessons learned.

Skills

Fintech / payments

IT risk management

DORA

Provider assurance

DNB engagement

Analytical thinking

English proficiency

Job description

Neema is seeking a hands-on leader to own the Digital Operational Resilience Act (DORA) framework and IT risk management for the EMI. You will report to the CEO of Neema EU and act as the bridge between technology delivery, risk/compliance, and Dutch regulators (DNB and AP).

The role is based in Amsterdam with a hybrid arrangement and is an important first-line capability within GRC. You will author policies and maintain registers, run assurance programs over ICT providers, and prepare for