DORA ICT Risk & Operational Resilience Consultant

DCG (Poland); Województwo pomorskie; Vor Ort; PLN 221.000 - 332.000; Vollzeit

Benefits dieser Stelle

Private medical care

Co-financing for the sports card

Constant support of dedicated consult

Zusammenfassung

DCG is seeking a DORA ICT Risk & Operational Resilience Consultant to translate regulatory requirements into practical control actions within the financial services sector. You will map requirements to controls, conduct gap assessments, and lead workshops with business, technology, risk, and compliance teams across Europe.

The role emphasizes evidence review, quality assurance, and producing final reports and executive summaries for senior stakeholders.

Qualifikationen

• Hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements.
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions.
• Proven experience conducting regulatory or control-framework gap assessments and requirements-to-controls mapping.
• Practical experience assessing control design effectiveness and operating effectiveness.
• Experience in evidence review, assurance reviews, and quality assurance.
• Experience working in Nordic or broader European financial services, including banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers.
• Ability to translate regulatory requirements into pragmatic control requirements and remediation actions.
• Strong workshop leadership and stakeholder facilitation skills with technical and non-technical audiences.
• Excellent written and verbal English communication skills.

Aufgaben

• Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements.
• Conduct DORA gap assessments covering current-state maturity, compliance gaps, risks, and remediation recommendations.
• Assess control design effectiveness and, where applicable, operating effectiveness.
• Review and challenge stakeholder evidence for completeness, relevance, traceability, and sufficiency.
• Apply quality assurance to evidence records, control evaluations, gap statements, and final reporting.
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders.
• Facilitate decision-making, manage actions, and communicate findings to senior stakeholders.
• Produce assessment workpapers, control matrices, gap registers, remediation roadmaps, and management presentations.
• Deliver a quality-assured DORA gap assessment, final report, and executive summary.

Kenntnisse

DORA ICT risk management

ICT risk

operational resilience

regulatory gap assessments

controls mapping

stakeholder facilitation

workshop leadership

English communication

evidence review

Jobbeschreibung

DORA ICT Risk & Operational Resilience Consultant

Stanowisko: DORA ICT Risk & Operational Resilience Consultant

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

DORA ICT Risk & Operational Resilience Consultant

Responsibilities:

• Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context
• Translate DORA requirements into practical control expectations and assessment criteria
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements
• Conduct DORA gap assessments covering current-state maturity, compliance gaps, risks, and remediation recommendations
• Assess control design effectiveness and, where applicable, operating effectiveness
• Review and challenge stakeholder evidence for completeness, relevance, traceability, and sufficiency
• Apply quality assurance to evidence records, control evaluations, gap statements, and final reporting
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders
• Facilitate decision-making, manage actions, and communicate findings to senior stakeholders
• Produce assessment workpapers, control matrices, gap registers, remediation roadmaps, and management presentations
• Deliver a quality-assured DORA gap assessment, final report, and executive summary

Requirements:

• Hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions
• Proven experience conducting regulatory or control-framework gap assessments and requirements-to-controls mapping
• Practical experience assessing control design effectiveness and operating effectiveness
• Experience in evidence review, assurance reviews, and quality assurance
• Experience working in Nordic or broader European financial services, including banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers
• Ability to translate regulatory requirements into pragmatic control requirements and remediation actions
• Strong workshop leadership and stakeholder facilitation skills with technical and non-technical audiences
• Excellent written and verbal English communication skills

Nice to have:

• Familiarity with EBA Guidelines, NIS2, ISO 27001, COBIT, ITIL, BCM/ISO 22301, or relevant local financial supervisory expectations
• Background in technology risk, IT audit, operational resilience, risk advisory, compliance, or internal controls
• Relevant certification such as CISA, CRISC, CISSP, ISO 27001 Lead Auditor/Implementer, COBIT, or similar
• Nordic language skills

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant