Support Nordic financial institutions in assessing their readiness for the EU Digital Operational Resilience Act (DORA). Conduct requirements-to-controls mapping, evaluate control design effectiveness with internal stakeholders, map risk appetite levels to controls and DORA requirements, review evidence, identify gaps, and facilitate stakeholder workshops to deliver a robust, quality-assured DORA gap assessment. Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context. Translate DORA requirements into practical control expectations and assessment criteria. Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements. Conduct gap assessments, documenting current-state maturity, compliance gaps, risks, and remediation recommendations. Assess control design effectiveness and, where applicable, operating effectiveness. Review and challenge evidence provided by stakeholders, ensuring it is complete, relevant, traceable, and sufficient to support conclusions. Apply quality assurance to assessment outputs, including evidence records, control evaluations, gap statements, and final reporting. Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders. Facilitate clear decision-making, manage actions, and communicate findings to senior stakeholders. Produce high-quality deliverables, including assessment workpapers, control matrices, gap logs, remediation roadmaps, and management presentations. Demonstrable hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements. Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions. Regulatory or control-framework gap assessments. Requirements-to-controls mapping. Operating effectiveness testing or assurance reviews. Evidence review and quality assurance. Experience working in a Nordic or broader European financial-services environment, such as banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers. Ability to turn regulatory requirements into clear, pragmatic control requirements and remediation actions. Strong workshop leadership and stakeholder facilitation skills, including the ability to engage both technical and non-technical audiences. Excellent written and verbal English communication skills. A Nordic language is advantageous.
#J-18808-Ljbffr
DORA Compliance & Risk Consultant in Gdynia – pracodawca: ITConnect Sp. z o.o.
Nasza firma to doskonały pracodawca, który oferuje dynamiczne środowisko pracy w obszarze analizy danych. Wspieramy rozwój zawodowy naszych pracowników poprzez dostęp do nowoczesnych technologii oraz możliwość pracy nad innowacyjnymi projektami w zespole Recovery Data Management. Oferujemy elastyczne godziny pracy, przyjazną kulturę organizacyjną oraz szereg benefitów, które sprzyjają równowadze między życiem zawodowym a prywatnym.
