(Senior) Consultant* – Operational & Cyber Resilience

The role

You will support financial industry clients in implementing regulatory requirements, specifically regarding DORA and EBA Guidelines. You will work at the intersection of regulation, ICT risk management, operational resilience, and IT governance.

What you will do

• Advise financial institutions on implementing and developing DORA requirements and sustainable Digital Operational Resilience.
• Analyze and optimize ICT/IT risk management, IT governance, and ICT/IT control frameworks.
• Support Third Party Risk Management, ICT Third Party Risk, IT Supplier Risk, and outsourcing management.
• Accompany customers with ICT Incident Management and Major ICT Incidents.
• Use approved AI and automation solutions to make analyses, documentation, and control activities more efficient.

Required qualifications

• Experience or sound knowledge in the area of DORA, ICT/IT risk management, Operational Resilience, or Operational Risk.
• Knowledge in at least one other relevant topic field such as IT Governance, ICT Controls, Incident Management, Third Party Risk Management, or outsourcing management.
• Ability to analyze regulatory requirements and translate them into practical governance, risk, and control measures with stakeholders.
• Experience in the role of (internal or external) management consultant with a track record of successful project contributions.
• Structured and analytical way of working.
• Curiosity for AI-enabled ways of working and willingness to use approved AI tools responsibly.
• Fluent German and English skills.

Nice to have

• Experience with the conception or further development of ICT/IT control frameworks and corresponding governance models.
• Practical experience with DORA implementation or transformation programs at banks, insurance companies, or other financial institutions.
• Knowledge in Third Party Risk Management and outsourcing management, especially in the context of regulatory requirements for ICT third-party providers.
• Experience with Major ICT Incident Management, Operational Resilience, or the design of corresponding risk and control processes.
• Experience in using AI, GenAI, or automation responsibly for analysis, documentation, or control processes.

Benefits

• Flexible working models and hybrid work possible depending on project assignment.
• Comprehensive onboarding including a personal coach and buddy.
• Continuous training and development opportunities including internal training and Udemy Business.
• Bike leasing programs.
• Capco Benefits Card with a monthly credit of 44 EUR.
• Regular health checks.
• Mental health courses.
• Support through the PME family service for different life situations.
• Permanent employment contract.
• Company events and after-work events.
• Dynamic and international environment with flat hierarchies.

About the company

Capco is a consultancy working at the intersection of Financial Services, regulation, risk, and technology. The company has a collaborative, flat, and entrepreneurial culture.