DORA Specialist

at  Cubane Solutions AB

REQUIRED SKILLS

• Previous working experience in Financial Services or consultancy in the Financial Services.
• Experience with industry compliance, regulations, standards, and frameworks related to cybersecurity and IT such as ISO 27001/2, NIST, COBIT, or similar.
• Experience in regulatory compliance projects and ability to analyze regulatory documents.
• Experience in Risk Management practices.
• Knowledge of EU DORA or Operation Resilience projects.
• Knowledge of the EBA regulatory landscape.
• Proven experience and excellent knowledge of process and internal controls design.
• Can lead on information cyber security best practice.
• Demonstrates skills related to information and cyber security.
• Ability to work collaboratively with different stakeholders (mainly Cybersecurity, Information Security, Digital, HR).
• Ability to be analytical and problem solving.
• Excellent communication skills, both verbal and written.
• Ability to explain technical concepts to non-technical groups.
• Ability to analyze a complex area and create simplicity.
• Fluency in English.

DESIRED SKILLS

• Relevant certifications such as CISSP, CISM, CISA or similar are highly valued.
• Participation in cybersecurity and DORA-related communities, forums, or professional networks.

RESPONSIBILITIES

• Support implementation of DORA (Digital Operational Resilience Act), to ensure compliance with DORA regulations.
• Develop cybersecurity governance and documented information required for DORA.
• Enhancing policies and procedures to ensure an effective internal governance and control framework.
• Supporting the project manager in overseeing the implementation of approved process improvements.
• Actively contribute to the operational steering group and reference groups to the project.
• Provide analysis and guidance to other works streams in the project.
• Work closely with all business functions to facilitate compliance with DORA requirements.
• Support the establishment/alignment of the Resilience Testing framework.
• Support ICT Risk Management.
• Support the alignment of ICT Incident Response and Reporting with DORA.