Dora Control Officer

About Welvaart

On a daily basis, we assume commitments and present solutions to our stakeholders in order to create a structure of human values, based on professionalism, honesty and rigor.

With a management based on Human Centered Design, we take care of our professionals with consistent career plans, but flexible with their needs and expectations of evolution. Our management team guarantees an empathetic and present leadership that will provide superior technological engagement and delivery to our clients' projects and products.

Project

As a DORA control officer, you will integrate our Cyber Security department in Portugal, working alongside other assessors and project management officers to control that our projects portfolio delivers the expected improvements to our DORA maturity.

Role

• Support DORA maturity assessment
• Collect evidence of DORA maturity: collaborate with IT teams to collect evidence of achieved compliance
• Audit evidence provided by CIB teams: assess the quality level of collected evidence and identify remaining gaps to achieve the target compliance level
• Increase CIB maturity: coordinate with CIB ITO IT Risk team and Group to obtain the formal approval of DORA compliance
• Contribute to the reports made to regulators: analyse and help structure CIB answers to regulators or audits inquiring about DORA maturity
• Support projects/program steering
• Assist committees preparation and animation with various stakeholders at different management level. Prepare communication on projects with relevant stakeholders (internal, external)
• Support monitoring of activities which contribute to DORA
• Document DORA maturity increase: plans, reports, trend analysis and back to green definition with SMEs when necessary
• Assist project resource management: assist budget (budget, FTE) formalization and monitoring for DORA initiatives

We are looking for

• Rules & norms (Knowledge of regulatory standards, ability to translate them into internal policies)
• Regulatory (general knowledge in IT and cybersecurity regulators framework)
• Control (Ability to verify operations, ensure that the procedures are being followed)
• Cybersecurity (general knowledge in cybersecurity risks, frameworks and requirements)
• Risk opinion (ability to challenge, approve and decide (new activities, projects)
• IT knowledge (global knowledge of IT, its major processes and assets & solutions)
• Business/IT Relationship (ability to understand business needs)
• Methodologies and tools needed - ISO 27001, NIST, Digital Operational Resilience Act (DORA), Microsoft office (Excel, Macro, PowerPoint)
• English is required.

What you can discover with us?

• Be part of a tech start-up
• Different scopes of project in different sectors
• Structure of fairness and equity salary (Consultant Profile)
• Training & Certification
• Career Path management
• More than 30 Partnerships
• Welvaart Ambassador Program

UNLEASH THE POWER OF YOUR CAREER