Assignment Description:

We are looking for a Senior DORA Specialist to join our dynamic team.

What you will work on:

• Lead the work stream focused on compliance with The Digital Operational Resilience Act (DORA), ensuring adherence to regulations by mid-January 2025.
• Develop and implement cybersecurity governance frameworks and documentation required for DORA compliance.
• Enhance policies and procedures to establish an effective internal governance and control framework.
• Collaborate with the project manager to oversee the implementation of approved process improvements.
• Actively contribute to the operational steering group and reference groups associated with the project.
• Provide analysis and guidance to other work streams within the project.
• Work closely with all business functions to facilitate compliance with DORA requirements.
• Support the establishment and alignment of the Resilience Testing framework.
• Assist with ICT Risk Management processes.
• Align ICT Incident Response and Reporting procedures with DORA requirements.

What you bring:

• Proven experience in Financial Services or consultancy within the Financial Services sector.
• Strong understanding of industry compliance, regulations, standards, and frameworks related to cybersecurity and IT, such as ISO 27001/2, NIST, COBIT, or similar.
• Experience with regulatory compliance projects, including the ability to analyze regulatory documents effectively.
• Solid knowledge of Risk Management practices.
• Familiarity with EU DORA and Operational Resilience projects.
• Understanding of the EBA regulatory landscape.
• Demonstrated experience in designing processes and internal controls.
• Ability to lead the adoption of information cybersecurity best practices.
• Proven skills in information and cybersecurity management.
• Excellent collaboration skills to engage effectively with various stakeholders, including Cybersecurity, Information Security, Digital, and HR teams.
• Strong analytical and problem-solving capabilities.
• Exceptional verbal and written communication skills, with the ability to convey technical concepts to non-technical audiences.
• Capacity to simplify complex areas and create clarity.
• Fluency in English.

Nice to have:

• Relevant certifications such as CISSP, CISM, CISA, or similar are highly valued.
• Participation in cybersecurity and DORA-related communities, forums, or professional networks.

If this sounds interesting, please send your CV to cv@veritaz.se