Senior DORA & EU Cyber Regulatory Consultant (Remote)

Kellwick; United States; Remote; USD 110,000 - 248,000; Part time

Job summary

Kellwick is seeking a Senior DORA & EU Cyber Regulatory Consultant to support organisations facing European cybersecurity, operational resilience and ICT governance requirements. The role focuses on DORA and NIS2 and requires practical implementation experience, not only regulatory knowledge.

You will help clients translate regulatory obligations into governance structures, operational controls, evidence and remediation programmes, working with risk, compliance, security, technology, procurement

Qualifications

• 5+ years in GRC, ICT risk, regulatory consulting or cybersecurity regulation.
• Practical DORA implementation or readiness experience.
• Strong understanding of DORA ICT Risk Management requirements.
• Knowledge of DORA Register of Information requirements.
• Strong working knowledge of NIS2.

Responsibilities

• Lead DORA readiness and gap assessment engagements.
• Assess ICT risk management frameworks.
• Map DORA requirements to existing controls and processes.
• Assess ICT third-party risk management.
• Support DORA Register of Information preparation and governance.
• Review ICT third-party contractual requirements.
• Assess incident management and regulatory reporting readiness.
• Review digital operational resilience testing programmes.
• Assess governance, accountability and management oversight.
• Review ICT business continuity and resilience arrangements.
• Support remediation of identified DORA gaps.
• Perform NIS2 readiness and gap assessments.
• Map NIS2 requirements to security and governance controls.
• Help organisations establish cybersecurity risk-management measures.
• Produce regulatory readiness roadmaps.
• Prepare evidence packs and management reporting.

Skills

GRC

ICT risk

Regulatory consulting

DORA implementation

NIS2 knowledge

Job description

Kellwick is seeking a Senior DORA & EU Cyber Regulatory Consultant to support organisations facing European cybersecurity, operational resilience and ICT governance requirements. The role focuses on DORA and NIS2 and requires practical implementation experience, not only regulatory knowledge.

You will help clients translate regulatory obligations into governance structures, operational controls, evidence and remediation programmes, working with risk, compliance, security, technology, procurement