DORA Compliance & Risk Consultant

O projekcie

• For our Client from banking industry we are looking for DORA Compliance & Risk Consultant

Possible location in Poland : Gdynia preferred; Gdańsk as an alternative (3 days per week from office)

Support Nordic financial institutions in assessing their readiness for the EU Digital Operational Resilience Act (DORA). The consultant will conduct requirements-to-controls mapping, evaluate control design effectiveness together with internal stakeholders, map risk appetite levels to controls and DORA requirements, as well as review evidence, identify gaps, and facilitate stakeholder workshops to deliver a robust, quality-assured DORA gap assessment.

Zakres obowiązków

• Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements.
• Conduct gap assessments, documenting current-state maturity, compliance gaps, risks, and remediation recommendations.
• Assess control design effectiveness and, where applicable, operating effectiveness.
• Review and challenge evidence provided by stakeholders, ensuring it is complete, relevant, traceable, and sufficient to support conclusions.
• Apply quality assurance to assessment outputs, including evidence records, control evaluations, gap statements, and final reporting.
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders.
• Facilitate clear decision-making, manage actions, and communicate findings to senior stakeholders.
• Produce high-quality deliverables, including assessment workpapers, control matrices, gap logs, remediation roadmaps, and management presentations.

Wymagania

• Demonstrable hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements.
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions.

Proven experience conducting

• Regulatory or control-framework gap assessments
• Requirements-to-controls mapping
• Control design effectiveness assessments
• Operating effectiveness testing or assurance reviews
• Evidence review and quality assurance
• Experience working in a Nordic or broader European financial-services environment, such as banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers.
• Ability to turn regulatory requirements into clear, pragmatic control requirements and remediation actions.
• Strong workshop leadership and stakeholder facilitation skills, including the ability to engage both technical and non-technical audiences.
• Excellent written and verbal English communication skills. A Nordic language is advantageous.