DORA ICT Risk & Operational Resilience Consultant

Responsibilities: Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context Translate DORA requirements into practical control expectations and assessment criteria Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements Conduct DORA gap assessments covering current-state maturity, compliance gaps, risks, and remediation recommendations Assess control design effectiveness and, where applicable, operating effectiveness Review and challenge stakeholder evidence for completeness, relevance, traceability, and sufficiency Apply quality assurance to evidence records, control evaluations, gap statements, and final reporting Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders Facilitate decision-making, manage actions, and communicate findings to senior stakeholders Produce assessment workpapers, control matrices, gap registers, remediation roadmaps, and management presentations Deliver a quality-assured DORA gap assessment, final report, and executive summary

Hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions Proven experience conducting reg