DORA Governance & TPRM Specialist

The role

The DORA Governance & TPRM Specialist will support the definition, implementation, and evolution of the Digital Operational Resilience framework. This role involves monitoring ICT and third-party risks and contributing to the ICT Third-Party Risk Management framework.

What you will do

• Support the definition, implementation, and evolution of the Digital Operational Resilience framework in line with DORA
• Monitor and manage ICT and third-party risks
• Contribute to the ICT Third-Party Risk Management (TPRM) framework
• Support second line of defense activities within the ERM framework
• Maintain and update the Register of Information (RoI)
• Support the definition and maintenance of policies and procedures related to ICT risk, digital resilience, and third-party management
• Contribute to the ICT Risk Appetite Framework
• Support ICT incident management oversight and remediation processes
• Prepare reporting and dashboards to communicate ICT and third-party risk exposure to senior stakeholders
• Collaborate with cross-functional teams to ensure alignment on digital resilience initiatives

Required qualifications

• Bachelor’s degree in economics, engineering, law or related fields
• 3–6 years of experience in ICT Governance / Risk & Compliance / Operational Resilience / Third Party Risk Management, and consulting
• Good knowledge of Digital Operational Resilience Act (DORA) and ICT risk management frameworks
• Understanding of ICT outsourcing and third-party risk management processes
• Experience in drafting policies, procedures and regulatory documentation
• Strong analytical skills
• Excellent communication skills
• Ability to interact with multiple stakeholders across different functions

Nice to have

• Professional certifications (e.g. CRISC, CISA, CISM, ISO 27001, ISO 22301)
• Experience in financial services or insurance sector

Benefits

• Comprehensive health benefit coverage
• Meal Vouchers
• Welfare allowance
• Access to internal and Tier 1 learning platforms
• Ongoing learning opportunities

About the company

Capco is a global technology and business consultancy, focused on the financial services sector. The company is growing in its Italian office.