Cyber Resilience Officer- DORA – Banking

Rothstein Recruitment Ltd

Cyber Resilience Officer – DORA – Banking

Excellent opportunity to own the execution/ongoing management of Cyber Resilience activities & also the new Cyber Security and Digital Operational Resilience Act (DORA) related capabilities.

This is an opportunity for a motivated self-starter, with a can-do mindset and the ability to connect information from various sources to help build a connected resilient organisation. The candidate will have the opportunity to strengthen and demonstrate strong knowledge of cyber resilience and the new DORA requirements coming into effect in January 2025.

• Support stakeholders across the Bank in assessing, understanding and managing cyber risk and bringing awareness on the topic.
• Conduct gap analysis and provide solutions to ensure compliance and alignment with DORA requirements.
• Support DORA compliance by coordinating the activities required across all six pillars of DORA: ICT Risk Management, ICT related Incident Reporting, Digital Resilience Testing, Information Sharing, ICT Third Party Risk and General Governance Principles.
• Stay up to date with the changing cyber risk landscape, emerging threats, regulatory requirements and cybersecurity industry best practises in the UK and EU (eg Network and Information Security (NIS2) Directive).
• Plan and execute DORA deliverables in cooperation with similar initiatives eg Operational Resilience, Business Continuity and Incident Management.
• Design and oversee regular testing exercises to evaluate the effectiveness of Digital Resilience and Cyber Security, contributing to the Bank’s overall resilience.
• Collaborate with various teams and departments including close partnership with the IT and Risk teams to drive collaborative firm-wide approach to cyber resilience.
• Conduct reviews on third parties’ cyber resilience as part of the third-party risk management process.
• Act as cyber resilience SME and champion on projects/change initiatives

Your skills

• Around 5 years of experience within Financial Services or Consultancy (familiarity with banking products and services).
• Comprehensive understanding and experience of cyber resilience principles/practises including experience in information security, business continuity planning, business impact assessments, crisis management and cyber security.
• Working knowledge and/or expertise of ISO27001, NIST, CAF or other industry standards.
• Knowledge and general understanding of EU Digital Operational Resilience Act (DORA) and Network and Information
• Security (NIS2) Directive.
• Knowledge of EBA Outsourcing Guidelines, PRA SS2/21 (Outsourcing and TPRM), ESMA Guidelines on Outsourcing to Cloud Service Providers and UK Operational Resilience regulatory requirements are advantageous.
• A team player with the ability to work independently and to manage and prioritise work to meet set deadlines.
• Excellent problem solving and analytical skills with the ability to adapt within a changing environment.
• Solid presentation skills with experience of facilitating meetings and workshops at all seniority levels.
• Great communicator with the ability to build relationships (both 1-to-1 and through existing governance forums) and influence key stakeholders.
• Strong expertise in using Microsoft applications (including Excel, Visio). Previous experience in producing PowerPoint presentations for senior management/audiences.
• Professional certification/qualification in Cyber Security is preferred.