DORA Compliance & Risk Consultant

IT CONNECT Sp. z o.o. Sp. k.; Gdynia; In loco; PLN 180.000 - 280.000; Tempo pieno

Descrizione del lavoro

IT CONNECT Sp. z o.o. Sp. k. poszukuje specjalisty ds. DORA, aby wspierać nordyckie instytucje finansowe w ocenie gotowości do EU Digital Operational Resilience Act oraz prowadzić mapowanie wymagań na kontrole.

Zakres obejmuje identyfikację luk, ocenę projektowych i operacyjnych skuteczności kontroleń, prowadzenie warsztatów z biznesem i IT oraz przygotowanie raportów, matryc kontrolnych i planów naprawczych dla kadry kierowniczej.

Competenze

• ,

Mansioni

• Interpretacja wymagań DORA w kontekście instytucji finansowych
• Przekładanie wymagań na praktyczne kontrole i kryteria oceny
• Przeprowadzanie mapowania wymagań do kontroli w politykach i procesach
• Wykonywanie gap analyses, opisanie dojrzałości stanu obecnego
• Ocena skuteczności projektowych i operacyjnych kontroli
• Weryfikacja dowodów z interesariuszami pod kątem kompletności i relewantności
• Zastosowanie QA do outputów oceny: dokumentacja, logi, raporty
• Prowadzenie warsztatów i spotkań z interesariuszami na różnych poziomach
• Przekazywanie ustaleń i rekomendacji kadrowi kierowniczemu
• Przygotowywanie wysokiej jakości deliverables: notesy, matrice, roadmapy i prezentacje

Conoscenze

DORA requirements

ICT risk management

Governance

Incident management

Third-party ICT risk

Stakeholder facilitation

English communication

Nordic language advantage

Descrizione del lavoro

Nasze wymagania:

• Demonstrable hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements.
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions.
• Regulatory or control-framework gap assessments.
• Requirements-to-controls mapping.
• Control design effectiveness assessments.
• Operating effectiveness testing or assurance reviews.
• Evidence review and quality assurance.
• Experience working in a Nordic or broader European financial-services environment, such as banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers.
• Ability to turn regulatory requirements into clear, pragmatic control requirements and remediation actions.
• Strong workshop leadership and stakeholder facilitation skills, including the ability to engage both technical and non-technical audiences.
• Excellent written and verbal English communication skills. A Nordic language is advantageous.

O projekcie:

Support Nordic financial institutions in assessing their readiness for the EU Digital Operational Resilience Act (DORA). Conduct requirements-to-controls mapping, evaluate control design effectiveness with internal stakeholders, map risk appetite levels to controls and DORA requirements, review evidence, identify gaps, and facilitate stakeholder workshops to deliver a robust, quality-assured DORA gap assessment.

Zakres obowiązków:

• Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements.
• Conduct gap assessments, documenting current-state maturity, compliance gaps, risks, and remediation recommendations.
• Assess control design effectiveness and, where applicable, operating effectiveness.
• Review and challenge evidence provided by stakeholders, ensuring it is complete, relevant, traceable, and sufficient to support conclusions.
• Apply quality assurance to assessment outputs, including evidence records, control evaluations, gap statements, and final reporting.
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders.
• Facilitate clear decision-making, manage actions, and communicate findings to senior stakeholders.
• Produce high-quality deliverables, including assessment workpapers, control matrices, gap logs, remediation roadmaps, and management presentations.