DORA CONTROL OFFICER (HYBRID LISBON OR PORTO)
Portuguese company hires for on-site position
Location: Portugal (Portoor Lisbon)
Only candidates already basedin Portugal will be considered
Work Model: Hybrid
Language Requirements:Fluent English French
Seniority: Senior (6 Years)
Sector: Banking
Instructions: Please send yourCV in English and make sure to include all skills and experience that match therequirements of the opportunity. This will significantly increase your chancesof success
About the Role
An international Cybersecurity and IT Riskorganization is looking for a DORA Control Officer to join its team inPortugal.
In this role you will play a critical part in drivingDigital Operational Resilience Act (DORA) compliance working closely with CyberSecurity IT Risk project teams and senior stakeholders. You will helpensure that projects and initiatives effectively improve the organizations DORAmaturity while supporting regulatory interactions and audits.
This is a high-visibility role at the crossroads of cybersecurityregulation governance and project oversight ideal for professionals withstrong regulatory expertise and the ability to influence across complexorganizations.
Key Responsibilities
DORA MaturityAssessment & Compliance
- Collect and review evidence of DORA compliance in collaboration with IT and business teams
- Audit evidence quality identify gaps and define remediation actions
- Coordinate with IT Risk and Group-level stakeholders to obtain formal DORA compliance validation
- Contribute to regulatory responses and audit deliverables related to DORA maturity
Project & Program Governance
- Support the steering of DORA-related projects and programs
- Prepare and facilitate committees and governance forums with stakeholders at various management levels
- Monitor initiatives contributing to DORA maturity including areas outside core cyber-governance (e.g. Back-ups Third-Party Risk Management TPRM)
- Document maturity progress through plans reports trend analysis and recovery actions
- Assist with resource and budget management (FTE cost tracking forecasting)
Technical & Regulatory Expertise
- Strong knowledge of regulatory frameworks related to IT and Cybersecurity
- Ability to translate regulations and standards into internal controls and policies
- Solid understanding of cybersecurity risks frameworks and requirements
- Proven experience in control audit and risk assessment
- Strong IT knowledge including processes assets and security solutions
- Ability to challenge assess and provide risk opinions on projects and activities
- Strong Business / IT relationship capabilities
Methodologies & Tools
- Digital Operational Resilience Act (DORA)
- ISO 27001
- NIST
- Microsoft Office (Excel Macros PowerPoint)
Language Requirements
- English Mastery (mandatory)
- French Intermediate / Practice (nice to have)
Soft Skills & Competencies
- Strong collaboration and teamwork skills
- Excellent written and verbal communication
- Ability to influence and impact stakeholders at different levels
- High adaptability in a changing regulatory environment
- Strong organizational and prioritization skills
- Ability to synthesize and simplify complex topics
- Comfortable challenging information and supporting change
- Strong networking and stakeholder management abilities
- Capacity to anticipate business and strategic evolution
CV Keywords (comma-separated)
DORA Control Officer Digital Operational Resilience ActDORA Compliance Cybersecurity Governance IT Risk Regulatory Compliance ISO27001 NIST Third Party Risk Management TPRM IT Controls Risk AssessmentCybersecurity Regulation Audit Governance Project Steering OperationalResilience
#CI - PROC25704