DORA ICT Risk & Operational Resilience Consultant

Quick Facts

• Role: DORA ICT Risk & Operational Resilience Consultant

Description

Support financial institutions in interpreting and implementing DORA ICT risk management and digital operational resilience requirements. Translate DORA requirements into practical control expectations and assessment criteria, then perform requirements-to-controls mapping and DORA gap assessments. Evaluate control design and (where applicable) operating effectiveness and deliver quality-assured reports and executive summaries.

Responsibilities

• Interpret DORA ICT risk management and operational resilience requirements in a financial-services context
• Translate DORA requirements into control expectations and assessment criteria
• Map requirements to controls across policies, processes, systems, and governance arrangements
• Conduct DORA gap assessments (current-state maturity, compliance gaps, risks, remediation recommendations)
• Assess control design effectiveness and operating effectiveness (where applicable)
• Review and challenge stakeholder evidence for completeness, relevance, traceability, and sufficiency
• Apply quality assurance to evidence records, control evaluations, gap statements, and final reporting
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders
• Facilitate decisions, manage actions, and communicate findings to senior stakeholders
• Produce workpapers and artifacts (control matrices, gap registers, remediation roadmaps, management presentations)
• Deliver a quality-assured DORA gap assessment, final report, and executive summary

Requirements

• Hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions
• Proven experience conducting regulatory or control-framework gap assessments and requirements-to-controls mapping
• Practical experience assessing control design effectiveness and operating effectiveness
• Experience in evidence review, assurance reviews, and quality assurance
• Experience working in Nordic or broader European financial services (banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers)
• Ability to translate regulatory requirements into pragmatic control requirements and remediation actions
• Strong workshop leadership and stakeholder facilitation skills with technical and non-technical audiences
• Excellent written and verbal English communication skills

Benefits

Not specified in the provided posting.