Digital Operational Resilience (DORA) Risk & Compliance Expert

Quick Facts

• Focus: DORA compliance and ICT operational resilience risk management

Description

Join a role focused on implementing and improving the bank’s compliance with the EU Digital Operational Resilience Act (DORA). You will assess ICT-related risks, manage remediation follow-ups, support ICT service provider risk management, and prepare regulatory reporting for management and supervisory bodies. You will also monitor regulatory changes and collaborate with IT, cybersecurity, risk, compliance, and audit teams.

Responsibilities

• Oversee DORA compliance activities (implementation, maintenance, improvement).

• Identify, analyze, and monitor ICT risks, including gap assessment vs. DORA requirements and remediation supervision.

• Support ICT supplier/service provider risk management by collecting, analyzing, and evaluating provider information.

• Develop, update, and review internal regulations, procedures, and instructions for ICT risk management and digital resilience.

• Prepare analyses, reports, and presentations for the Board, committees, supervisory bodies, and stakeholders.

• Collaborate with business units, IT, cybersecurity, compliance, risk, and audit teams during resilience testing/controls and monitor resulting action plans.

• Monitor regulatory changes and support supervisory reporting, training, and information/communication activities related to DORA, ICT risk, and digital resilience.

Requirements

• Higher education (preferred: computer science, cybersecurity, economics, finance, risk management, or related).

• 3+ years of experience in ICT risk management, cybersecurity, regulatory compliance, information security, or IT audit.

• Knowledge of DORA requirements and digital operational resilience for financial institutions.

• Knowledge of ICT risk management, information security, and ICT service provider risk management.

• Experience preparing analyses, reports, and regulatory documentation.

Benefits

• Hybrid work: 8 remote work days per month; onsite work at the company headquarters in Warsaw.

• Medical care (Medicover) and group insurance (Ergo Hestia).

• Company social benefits fund (loans, holiday benefits).

• Contribution for eyeglasses (600 PLN).

• Employee pension program (eligibility after 7 months; contribution 3.5% of salary).

• Funding for development activities.

• Preferential access to PZU Zdrowie sports packages.

• Free access to foreign language e-learning platform (eTutor).

• Free access to wellbeing platform (BPS dbaMy) with consultations (psychologist, psychiatrist, dietitian, personal trainer, etc.).