Senior Cybersecurity/IT Risk Consultant – DORA Compliance in Paris

Context

Consulting in project security support, with over 9 years of experience.

As part of the Group's compliance with DORA regulatory requirements, our client is seeking a senior cybersecurity/IT risk/regulatory compliance consultant to support the team.

The main objective is to assess and manage the compliance of the Group's various entities with DORA Pillar 1, at Lo D1/Lo D2 levels, and then implement a consolidated system to ensure ongoing monitoring of this compliance.

The role therefore includes a strong GRC/compliance/IT risk component, as well as significant management, KPI, reporting, and Group action plan aspects. Main Responsibilities

: The consultant will be responsible for

• Evaluating the compliance of the various entities with Pillar 1 of DORA – Lo D1 / Lo D2.
• Identifying and documenting gaps and non-conformities.
• Developing action plans to address the identified gaps.
• Streamlining the various local and Group action plans.
• Monitoring their progress.
• Defining and implementing DORA compliance KPIs at the Group level.
• Developing dashboards and reporting mechanisms.
• Consolidating information from the various entities.
• Ensuring systematic compliance monitoring.
• Implementing a sustainable RUN system to ensure ongoing DORA compliance monitoring. Key skills:
• Information systems security.
• IT risk management.
• Information security governance and compliance.
• Sound knowledge of regulations applicable to the banking sector.
• Knowledge of DORA.
• Compliance assessment and gap identification.
• Development and monitoring of remediation plans.
• Definition and monitoring of KPIs.
• Reporting and dashboards.
• Ability to consolidate information from multiple entities. Information Systems Security (ISS) / Risks:

Beyond DORA, the ideal candidate will be a consultant capable of supporting business units and projects in identifying security requirements and associated risks, and then in defining measures to mitigate these risks.

Specific expertise in information systems security and IT risks is required, as well as knowledge of the banking sector and regulations, particularly DORA.

The role will involve activities such as information systems security risk analysis, defining security requirements, and supporting projects on security issues.

Ideal candidate profile

Senior GRC/IT Risk/Cybersecurity Consultant with over 9 years of experience, possessing essential and significant experience in the banking or financial sector.

The ideal candidate will have prior experience working on IT regulatory compliance, ideally directly with DORA: gap analysis, Lo D1/Lo D2 controls, non-conformity identification, remediation plans, KPIs, and compliance reporting.

Experience within a large banking group with multiple entities would be particularly relevant given the need to consolidate results at the Group level.

The consultant's ability to transition from a project/compliance approach to defining a sustainable operational framework is also highly valued, as this is explicitly expected of the role.

Application: CV + cover letter + copies of diplomas to be sent to contact@keoni. fr #J-18808-Ljbffr