DORA Compliance & Risk Consultant

Ework Group; Gdańsk; Hybrid; PLN 120,000 - 180,000; Full time

Job summary

Ework Group is seeking a DORA Compliance & Risk Consultant for a banking client. The role supports Nordic financial institutions in assessing readiness for the EU DORA, translating requirements into control criteria, and leading workshops with risk, compliance, and IT stakeholders.

Hybrid work option in Poland (Gdynia preferred, Gdańsk alternative) with 3 days per week from office. Responsibilities include mapping requirements to controls, conducting gap assessments, reviewing evidence, and

Qualifications

• Hands-on DORA experience, focusing on ICT risk management and digital operational resilience.
• Strong knowledge of ICT risk, IT governance, operational resilience and third‑party ICT risk.
• Proven experience in regulatory or control‑framework gap assessments and mapping.
• Ability to translate regulatory requirements into pragmatic control requirements.
• Excellent written and spoken English; a Nordic language is a plus.

Responsibilities

• Interpret DORA ICT risk requirements in a financial‑services context.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance.
• Conduct gap assessments, documenting current-state maturity, gaps, risks, and remediation recommendations.
• Assess control design effectiveness and, where applicable, operating effectiveness.
• Review and challenge evidence from stakeholders for completeness and relevance.
• Apply quality assurance to assessment outputs, including records and logs.
• Lead workshops and interviews with business, risk, compliance, and IT stakeholders.
• Facilitate decision making and communicate findings to senior stakeholders.
• Produce high-quality deliverables: workpapers, control matrices, gap logs, roadmaps, and reports.

Skills

DORA knowledge

ICT risk management

Regulatory gap assessments

Requirements-to-controls mapping

Control design

Operating effectiveness

Evidence review

Workshop leadership

Stakeholder facilitation

English proficiency

Nordic language advantage

Job description

O projekcie:

• For our Client from banking industry we are looking for DORA Compliance & Risk Consultant

Possible location in Poland : Gdynia preferred; Gdańsk as an alternative (3 days per week from office)

Support Nordic financial institutions in assessing their readiness for the EU Digital Operational Resilience Act (DORA). The consultant will conduct requirements-to-controls mapping, evaluate control design effectiveness together with internal stakeholders, map risk appetite levels to controls and DORA requirements, as well as review evidence, identify gaps, and facilitate stakeholder workshops to deliver a robust, quality-assured DORA gap assessment.

Wymagania:

• Demonstrable hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements.
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions.
• Proven experience conducting:
  • Regulatory or control-framework gap assessments
  • Requirements-to-controls mapping
  • Control design effectiveness assessments
  • Operating effectiveness testing or assurance reviews
  • Evidence review and quality assurance
• Experience working in a Nordic or broader European financial-services environment, such as banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers.
• Ability to turn regulatory requirements into clear, pragmatic control requirements and remediation actions.
• Strong workshop leadership and stakeholder facilitation skills, including the ability to engage both technical and non-technical audiences.
• Excellent written and verbal English communication skills. A Nordic language is advantageous.

Codzienne zadania:

• Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements.
• Conduct gap assessments, documenting current-state maturity, compliance gaps, risks, and remediation recommendations.
• Assess control design effectiveness and, where applicable, operating effectiveness.
• Review and challenge evidence provided by stakeholders, ensuring it is complete, relevant, traceable, and sufficient to support conclusions.
• Apply quality assurance to assessment outputs, including evidence records, control evaluations, gap statements, and final reporting.
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders.
• Facilitate clear decision-making, manage actions, and communicate findings to senior stakeholders.
• Produce high-quality deliverables, including assessment workpapers, control matrices, gap logs, remediation roadmaps, and management presentations.