DORA Compliance & Risk Consultant

ITConnect; Gdynia; Hybrid; PLN 90.000 - 130.000; Vollzeit

Zusammenfassung

ITConnect Sp. z o.o. is seeking a DORA and ICT risk governance specialist to support Nordic financial institutions by translating regulatory requirements into practical controls and conducting requirements-to-controls mappings.

You will document current-state gaps with evidence and lead stakeholder workshops to deliver robust assessments. Responsibilities include mapping controls, assessing design and operating effectiveness, reviewing evidence, and producing high-quality deliverables such as

Qualifikationen

• Hands-on experience applying DORA in financial-institution contexts.
• Ability to translate regulatory requirements into pragmatic controls and criteria.
• Experience mapping requirements to controls across policies, processes, systems, and governance.

Aufgaben

• Interpret DORA ICT risk management and resilience requirements for financial institutions.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements.
• Conduct gap assessments documenting current-state maturity, compliance gaps, risks, and remediation recommendations.
• Assess control design and operating effectiveness where applicable.
• Review stakeholder evidence for completeness, relevance and traceability.

Kenntnisse

DORA expertise

ICT risk management

Regulatory gap assessments

Stakeholder facilitation

Workshop leadership

English proficiency

Jobbeschreibung

Support Nordic financial institutions in assessing their readiness for the EU Digital Operational Resilience Act (DORA). Conduct requirements-to-controls mapping, evaluate control design effectiveness with internal stakeholders, map risk appetite levels to controls and DORA requirements, review evidence, identify gaps, and facilitate stakeholder workshops to deliver a robust, quality-assured DORA gap assessment.

• Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements.
• Conduct gap assessments, documenting current-state maturity, compliance gaps, risks, and remediation recommendations.
• Assess control design effectiveness and, where applicable, operating effectiveness.
• Review and challenge evidence provided by stakeholders, ensuring it is complete, relevant, traceable, and sufficient to support conclusions.
• Apply quality assurance to assessment outputs, including evidence records, control evaluations, gap statements, and final reporting.
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders.
• Facilitate clear decision-making, manage actions, and communicate findings to senior stakeholders.
• Produce high-quality deliverables, including assessment workpapers, control matrices, gap logs, remediation roadmaps, and management presentations.
• Demonstrable hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements.
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions.
• Regulatory or control-framework gap assessments.
• Requirements-to-controls mapping.
• Operating effectiveness testing or assurance reviews.
• Evidence review and quality assurance.
• Experience working in a Nordic or broader European financial-services environment, such as banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers.
• Ability to turn regulatory requirements into clear, pragmatic control requirements and remediation actions.
• Strong workshop leadership and stakeholder facilitation skills, including the ability to engage both technical and non-technical audiences.
• Excellent written and verbal English communication skills. A Nordic language is advantageous.