Third-Party Risk Manager - Hybrid, DORA-ready FinTech

Deblock; Porto; On-site; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Competitive salary and stock options

The best tech for your job

30 days of paid holidays

Hybrid/remote work setting

Work abroad for 4 months a year

Job summary

Deblock in Porto is expanding its risk and compliance function to strengthen third-party and ICT risk under DORA for a regulated EMI and crypto-asset service provider. You will translate regulatory requirements into practical controls and governance that scale with the business.

You will build and monitor KRIs, run due diligence, manage the outsourcing register, and support the DORA programme, with a hybrid work model, 30 days holidays and a stock options sign-on bonus.

Qualifications

• Experience in third-party and ICT risk management.
• Ability to translate regulatory requirements into practical controls.
• Experience with regulatory frameworks (DORA is a plus).

Responsibilities

• Strengthen third-party and ICT risk framework, and governance standards.
• Run due diligence on providers across operational, ICT, compliance and financial risk.
• Own the register of outsourcing and ICT third-party arrangements, and the information it carries.
• Monitor provider performance, incidents and concentration risk; escalate what matters.
• Build KRIs, dashboards and reporting for management and board insight into exposure.
• Map critical/important functions and dependencies, including exit strategies and substitutability.
• Support DORA implementation across contracts, information registers, and resilience testing obligations.

Skills

Risk management

Regulatory compliance

Due diligence

Governance & controls

Job description

Deblock in Porto is expanding its risk and compliance function to strengthen third-party and ICT risk under DORA for a regulated EMI and crypto-asset service provider. You will translate regulatory requirements into practical controls and governance that scale with the business.

You will build and monitor KRIs, run due diligence, manage the outsourcing register, and support the DORA programme, with a hybrid work model, 30 days holidays and a stock options sign-on bonus.