- Assist in establishing a comprehensive resilience framework that meets DORA standards and other recognised guidelines (e.g. ISO 22301, ISO 27001, NIST).
- Draft internal controls, policies, training content, and risk assessment methodologies.
- Contribute to core DORA workstreams such as ICT risk management, scenario-based testing, and oversight of third-party providers.
- Coordinate workshops and sessions to drive awareness and ensure consistent understanding across departments.
- Act as a point of contact between programme delivery teams, legal advisors, SMEs, and operational leads.
- Monitor implementation progress and support a smooth transition into standard business processes.
- Develop and deliver resilience-focused training across various teams.
- Promote best practices in risk and continuity planning.
- Embed a culture of awareness, accountability, and continuous improvement.
- A degree in Risk Management, Cyber Security, Information Technology, or a related discipline.
- A minimum of 5 years’ experience in operational resilience, cybersecurity, or regulatory roles.
- Solid understanding of UK and EU regulatory frameworks, with hands-on experience relating to DORA.
- Demonstrable experience conducting regulatory gap analyses, resilience testing, and risk assessments.
- Strong organisational skills and the ability to manage competing priorities in a deadline-driven environment.
- Excellent interpersonal and stakeholder management skills, particularly in regulated settings.
- Relevant certifications (e.g. CISSP, CISM, CRISC, CBCP).
- Background in Agile delivery environments.
- Confident communicator with a structured approach to delivering complex regulatory information.