Operational Resilience Manager – DORA – Banking Full Time

Rothstein Recruitment Ltd

Operational Resilience Manager – DORA – Banking

Operational Resilience & Third Party Oversight Manager

Excellent opportunity to join top rated Private Bank to Manage Operational Resilience and 3rd party oversight. With a focus on Op Resilience – the ideal candidate will have experience in Op Resilience as well as ideally experience leading or mentoring teams.

Manage and coordinate the bank’s Operational Resilience activities:

• Working directly with the business, ensure that Important Business Services (IBSs) and associated resource mapping of critical processes remain current and are maintained over time.
• Ability to see products and services from a customer’s point of view.
• Ensure Digital Operational Resilience Act/DORA compliance, by coordinating the activities required across all DORA pillars: ICT Risk Management, ICT related Incident Reporting, Digital Resilience Testing, Information Sharing, ICT Third Party Risk and General Governance Principles.
• Plan and execute scenario testing by considering combinations of tests across the 5 pillars – people, technology, facilities, information/data and 3rd party/outsourced arrangements (incl. intra-group outsourcing) and beyond – engaging and collaborating with stakeholders across the organisation.
• Design and oversee regular testing exercises to evaluate the effectiveness of Digital Resilience and Cyber Security (in line with DORA requirements), contributing to the Bank’s overall resilience.
• Support the embedding of data management culture into the organisation (part of information/data operational resilience pillar). Understanding, interpreting and documenting the bank’s data flows in the critical processes.
• Track the remediation plans of open vulnerabilities associated with IBSs, ensuring they stay on track for delivery.
• Ensure any new vulnerabilities are detected in a timely manner including by analysing past Operational Risk Events/Operational Risk Issues (OREs/ORIs).
• Provide regular MI and ensure the Operational Resilience Self-Assessment is updated in preparation for the Board
• Ensure Operational Resilience and Third-Party Risk Management tool (once implemented) is utilised effectively and efficiently within the whole organisation. Aim to continually improve the effectiveness and efficiency of the resilience function’s processes.
• Stay up to date with current developments in the industry including upcoming regulation, cyber risk landscape, technical advancements and current trends to bring relevant insights into the bank.

Manage and coordinate the bank’s Outsourcing/Third Party Risk Management oversight activities:

• Act as the main point of contact for outsourcing/third party management related queries across the organisation, including intra-group outsourcing.
• Engage in the bank’s end-to-end Outsourcing/Third-Party Risk Management processes, including due diligence reach outs and service provider’s performance monitoring in collaboration with Vendor Relationship Owners.
• Maintain the Outsourcing/Third Party Register up-to-date, ensuring third party/outsourcing relationships are accurately captured, monitored and reported.
• Contribute to the tactical approach of understanding and bringing the relevant service providers to a certain resilience baseline, considering also DORA requirement for ICT service providers.
• Produce and present regular reporting to a range of stakeholders across the organisation and committees.