Vendor Risk & IT Compliance Lead — Remote 1x/wk

Qred AB; Stockholms kommun; Hybrid; SEK 900,000 - 1,300,000; Full time

Job summary

Qred AB in Stockholm is seeking an ICT Risk & Vendor Specialist to own 1st line IT vendor governance, procurement, and critical financial systems within the CTO organization. You will bridge technical operational oversight, vendor project management, and regulatory compliance to keep our scaling infrastructure secure and compliant with European banking standards.

The role requires building a scalable TPRM framework, leading DORA readiness, end-to-end procurement, and cross-functional alignment

Qualifications

• Several years of experience within IT vendor governance, procurement, ICT operational risk, or third‑party risk management.
• Direct knowledge of regulatory frameworks impacting financial systems and fintech, specifically DORA.
• Proven track record in software onboarding, implementation planning, and vendor capability mapping.
• Experience in regulated environments such as Banking or Fintech.
• Industry certifications such as CRISC, CISA, or Certified DORA Compliance Specialist are desirable.

Responsibilities

• Build and execute 1st Line TPRM framework and vendor cataloging to optimize total cost of ownership.
• Lead operational readiness for DORA compliance by mapping, risk-classifying, and monitoring all critical ICT third-party service providers.
• Manage end-to-end procurement processes and implementation projects, ensuring full capability utilization and clear understanding of system boundaries.
• Establish implementation playbooks for onboarding, integration, cutover, and offboarding while translating contract terms into active SLA monitoring workflows.
• Facilitate cross-functional alignment across Legal, Operations, Cyber Security, and executive leadership, serving as the 1st Line point of contact for ICT audits.

Skills

Vendor governance

Procurement

IT risk management

Project management

Education

CRISC

CISA

Certified DORA Compliance Specialist

Tools

DORA compliance

Job description

Qred AB in Stockholm is seeking an ICT Risk & Vendor Specialist to own 1st line IT vendor governance, procurement, and critical financial systems within the CTO organization. You will bridge technical operational oversight, vendor project management, and regulatory compliance to keep our scaling infrastructure secure and compliant with European banking standards.

The role requires building a scalable TPRM framework, leading DORA readiness, end-to-end procurement, and cross-functional alignment