DORA Compliance & Risk Consultant

Our requirements

• Demonstrable hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements.
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions.
• Regulatory or control-framework gap assessments.
• Requirements-to-controls mapping.
• Control design effectiveness assessments.
• Operating effectiveness testing or assurance reviews.
• Evidence review and quality assurance.
• Experience working in a Nordic or broader European financial-services environment, such as banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers.
• Ability to turn regulatory requirements into clear, pragmatic control requirements and remediation actions.
• Strong workshop leadership and stakeholder facilitation skills, including the ability to engage both technical and non-technical audiences.
• Excellent written and verbal English communication skills. A Nordic language is advantageous.

Your responsibilities

• Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements.
• Conduct gap assessments, documenting current-state maturity, compliance gaps, risks, and remediation recommendations.
• Assess control design effectiveness and, where applicable, operating effectiveness.
• Review and challenge evidence provided by stakeholders, ensuring it is complete, relevant, traceable, and sufficient to support conclusions.
• Apply quality assurance to assessment outputs, including evidence records, control evaluations, gap statements, and final reporting.
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders.
• Facilitate clear decision-making, manage actions, and communicate findings to senior stakeholders.
• Produce high-quality deliverables, including assessment workpapers, control matrices, gap logs, remediation roadmaps, and management presentations.

About the project

Benefits

• sharing the costs of sports activities
• private medical care

Recruitment stages

• 1.
  Rozmowa z rekruterem ok. 15 min
• 2.
  Spotkanie rekrutacyjne z klientem ok. 60 min

IT CONNECT Sp. z o.o. Sp. k.