Cyber Security DORA Control Officer

Decskill; Lisboa; Presencial; EUR 40 000 - 70 000; Tempo integral

Resumo da oferta

A leading IT consulting company in Lisbon is seeking a Cyber Security DORA Control Officer responsible for supporting compliance assessments and coordinating with IT teams. This role includes auditing compliance evidence, contributing to regulator reports, and assisting in project management. Candidates should possess knowledge of regulatory standards, cybersecurity risks, and proficiency in Microsoft Office. A good level of English is required. Interested candidates should send their CV to the provided email.

Qualificações

• Knowledge of regulatory standards and ability to translate them into internal policies.
• General knowledge in IT and cybersecurity regulators framework.
• Ability to verify operations and ensure procedures are followed.
• Knowledge in cybersecurity risks, frameworks and requirements.
• Ability to challenge, approve and decide on new activities.
• Global knowledge of IT and its major processes and assets.
• Ability to understand business needs.
• Familiarity with ISO 27001, NIST, Digital Operational Resilience Act (DORA).
• Proficiency in Microsoft Office, including Excel and PowerPoint.
• Good proficiency in English.

Responsabilidades

• Support DORA maturity assessment by collecting compliance evidence.
• Audit evidence provided by group teams and assess quality.
• Coordinate with group ITO IT Risk team for DORA compliance.
• Contribute to reports for regulators regarding DORA maturity.
• Assist in preparation and management of committees with stakeholders.
• Support monitoring of DORA contribution activities.
• Document DORA maturity increase with plans and reports.
• Assist in project resource management and budget monitoring.

Conhecimentos

Knowledge of regulatory standards

General knowledge in IT and cybersecurity regulators framework

Ability to verify operations

General knowledge in cybersecurity risks

Ability to challenge and approve new activities

Global knowledge of IT processes

Ability to understand business needs

Familiarity with ISO 27001, NIST, DORA

Microsoft Office (Excel, Macro, PowerPoint)

Good level of English

Descrição da oferta de emprego

Decskill, founded in 2014 as an IT Consulting Company, places paramount importance on its greatest asset: its people. Our main mission is to deliver value through knowledge and talent, and we achieve this by fostering a culture of excellence and investing in the development and well-being of our people. With over 600 dedicated professionals and offices in Lisbon, Porto, Madrid, and Luxembourg, Decskill operates across three core areas:

• DECSKILL TALENT: We believe that our people are key to our success. Through Decskill Talent, we empower our team to embrace the digital transformation challenges of our clients. We collaborate with clients to drive innovation, ensuring project success and business growth.
• DECSKILL BOOST: Equipping our team with the latest tools and methodologies, we optimize Time-to-Market and deliver innovative solutions exceeding client expectations.
• DECSKILL CONNECT: Our team collaborates closely with clients to implement and manage IT infrastructures that generate long-term value.

At Decskill, we believe that by nurturing and empowering our people to confront the challenges of digital transformation, we create value not only for our clients but also for our entire ecosystem, fostering a digital community dedicated to growth and progress.

We are looking for an Cyber Security DORA Control Officer!

Responsibilities

• Support DORA maturity assessment: collect evidence of DORA maturity by collaborating with IT teams to collect evidence of achieved compliance
• Audit evidence provided by group teams: assess the quality level of collected evidence and identify remaining gaps to achieve the target compliance level
• Increase group maturity: coordinate with group ITO IT Risk team and Group to obtain formal approval of DORA compliance
• Contribute to the reports made to regulators: analyse and help structure group answers to regulators or audits inquiring about DORA maturity
• Assist committees’ preparation and animation with various stakeholders at different management levels. Prepare communication on projects with relevant stakeholders (internal, external)
• Support monitoring of activities which contribute to DORA: identify main contributors to DORA maturity and involve them to organize regular compliance reporting. In particular, provide special attention to projects which are not part of the cyber-governance such as management and security of back-ups or Third Party Risk Management (TPRM)
• Document DORA maturity increase: plans, reports, trend analysis and back to green definition with SMEs when necessary
• Assist project resource management: assist budget (budget, FTE) formalization and monitoring for DORA initiatives

Requirements

• Rules & norms (Knowledge of regulatory standards, ability to translate them into internal policies)
• Regulatory (general knowledge in IT and cybersecurity regulators framework)
• Control (Ability to verify operations, ensure that the procedures are being followed)
• Cybersecurity (general knowledge in cybersecurity risks, frameworks and requirements)
• Risk opinion (ability to challenge, approve and decide on new activities, projects)
• IT knowledge (global knowledge of IT, its major processes and assets & solutions)
• Business/IT Relationship (ability to understand business needs)
• Methodologies and tools needed: ISO 27001, NIST, Digital Operational Resilience Act (DORA)
• Microsoft Office (Excel, Macro, PowerPoint)
• Good level of English

If you’re interested in this job, please send your CV to [e-mail] with reference “CA/DORA".

Decskill is committed to equality and non-discrimination with all our talents. We recruit and promote talent based on diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any other form of discrimination incompatible with the dignity of the human being.