Head of Digital Operational Resilience Team

Quick Facts

• Role: Head of Digital Operational Resilience Team

Description

Lead a team responsible for implementing, maintaining, and developing the bank’s compliance with DORA requirements and building digital operational resilience. Oversee ICT and ICT vendor risk identification, assessment, monitoring, and reporting, including critical and key ICT service providers. Coordinate DORA gap analyses, corrective action execution, resilience tests, internal ICT risk and resilience regulations, regulatory monitoring, and support for audits and internal control system effectiveness.

Responsibilities

• Manage the team’s work and coordinate activities related to DORA compliance and digital resilience development
• Supervise processes for identifying, assessing, monitoring, and reporting ICT and ICT vendor risks (including critical/key providers)
• Coordinate DORA gap analyses, oversee corrective actions, resilience testing, and implementation of recommendations
• Develop, update, and maintain internal regulations for ICT risk management and digital resilience
• Coordinate collaboration between business, IT, cyber security, compliance, risk management, audit, and business continuity
• Monitor regulatory changes and prepare reports and materials for the Management Board, Supervisory Board, and regulatory authorities
• Represent the bank during inspections and audits; support employee competence development and effective internal control system functioning in the team’s scope

Requirements

• Higher education (preferably in IT, cyber security, risk management, economics, finance or related)
• 5+ years of experience in ICT risk management, cyber security, regulatory compliance, or information security
• 2+ years of experience in a managerial role or leading an expert team
• Very good knowledge of DORA and topics related to digital operational resilience in financial institutions
• Knowledge of financial sector regulations, especially KNF and EBA guidance and ICT outsourcing requirements
• Knowledge of risk and information security management standards and best practices, especially ISO 27001, NIST, COBIT, or ITIL
• Experience preparing materials for the Management Board, committees, and regulatory bodies
• Analytical thinking, risk assessment, and decision-making ability

Benefits

• Hybrid work: 8 remote work days per month; on-site at headquarters in Warsaw (Grzybowska 81)
• Medical care (Medicover) free for the employee; family members via paid packages
• Group insurance (Ergo Hestia)
• Company social benefits fund: preferential loans, holiday bonuses, and “wczasy pod gruszą” (vacation support)
• Glasses allowance up to 600 PLN
• Employee pension scheme (eligibility after 7 months; 3.5% employer contribution)
• Co-financing for development initiatives
• Access to PZU Zdrowie sports packages on preferential terms
• Free access to the eTutor language e-learning platform (English, Spanish, German, Italian, French)
• Free access to the BPS dbaMy wellbeing platform (consultations with psychologist, psychiatrist, dietitian, personal trainer, and others)