Senior SME – ICT Risk, Resilience & DORA Implementation

• Extensive experience in ICT risk management, business and ICT continuity and recovery planning.
• Good understanding of ICT environment in a business context.
• Experience in conducting BIAs and linking business impact to supporting ICT environment.
• Experience working with ISO 22301 is a strong advantage.
• Proven experience from DORA implementation within financial services is required.
• Solid understanding of controls and regulatory frameworks, particularly related to DORA and ICT risk.
• Experience in working in large, complex organisations with multiple stakeholders.
• Familiarity with process mapping and BIA related documentation approaches/tools is beneficial.
• Ability to work independently with limited guidance in a dynamic environment.
• Ability to work across both business and IT, maintaining a holistic perspective.

Nice to have:

• Proactive and execution-oriented (“doer” mindset).
• Adaptable and flexible, comfortable working in an agile environment.
• Strong communication and stakeholder management skills.
• Structured and analytical with the ability to translate complex topics into clear outcomes.
• Consulting background is highly desirable.
• Fluent in English (Nordic language skills are a plus).

• Identify, assess and document business and operational functions and their end-to-end value chains, including data assets, supporting ICT environment and dependencies.
• Assess criticality of functions, conduct and facilitate BIAs and define RTOs and RPOs.
• Contribute to the development of business and ICT continuity and recovery plans.
• Support the design and implementation of controls related to ICT risk and operational resilience.
• Collaborate with stakeholders across business, IT, and Business Continuity and Crisis Management and Resilience (BCCM&R).
• Analyse and interpret DORA requirements including regulatory technical standards.