IT Risk Management Expert (Dora)

IT Risk Management Expert (Dora)

For the client, the IT company, i am looking for a senior-level IT Risk Management Expert, with a focus on Third Party Risk Management activities as stipulated in DORA. The work schedule is 8 hours per day, with a hybrid work model requiring 2 days per week at the office. We are seeking an organized, detail-oriented individual with experience in both coordinating IT risk exercises and performing IT risk assessments against implemented IT controls.

Tasks

• Coordinate the risk assessment (RA) activities for 3^rd party providers, in line with DORA requirements: liaising with internal IT team, business owners and external providers, lead the assessment process and the rating, and in some cases perform risk assessments based on audit reports, certifications, known incidents or events.
• Offer guidance to business and IT owners through risk assessment process for 3^rd party providers.
• Collect from the 3^rd party providers the necessary info and documents for the RA process.
• Be updated with the latest DORA regulatory requirements and translate the RA related requirements into actions.
• Perform reporting for risk assessment activities.
• Other DORA related activities, as requested.

Background

• University degree
• Experience of at least 3 years in 3^rd party Risk Management / IT Risk Management / IT Audit (internal or external)
• Strong understanding of DORA regulatory requirements
• Good knowledge of NBR legislation, EBA / ECB guidelines on ICT and security risk management
• Experience in conducting gap / risk assessments
• Ability to keep the deadlines and to deliver good results under pressure
• Analytical skills, able to work independently or in a team, as required by the tasks assigned
• Strong communication skills, both written and verbal for interaction with technical and non-technical stakeholders
• Ability to plan, organize and prioritize the activity
• English language – advanced level.
• Highest standard of ethics and integrity.

Hybrid work, 2 days per week at the office, 6 district, Grozăvești.