DORA Governance & TPRM Specialist

About the role

Capco, a global technology and business consultancy focused on the financial services sector, is expanding its consulting team in Italy. As part of the team, the DORA Governance & TPRM Specialist supports the definition, implementation and evolution of the Digital Operational Resilience framework under DORA, monitors ICT and third-party risks and contributes to second-line-of-defense activities within the ERM framework.

Key responsibilities

• Support the definition, implementation and evolution of the DORA framework, including governance, roles, responsibilities and reporting
• Monitor and manage ICT and third-party risks, with a focus on service providers and outsourcing arrangements
• Contribute to the ICT TPRM framework, including risk assessment, due diligence and ongoing supplier monitoring
• Support second-line-of-defense activities within the ERM framework (KRI, RAF, controls) on ICT and security risks
• Maintain and update the Register of Information (RoI) for ICT services and providers
• Support policies and procedures on ICT risk, digital resilience and third-party management
• Contribute to the ICT Risk Appetite Framework, including indicators, thresholds and escalation mechanisms
• Support ICT incident management oversight and remediation, and prepare reporting and dashboards for senior stakeholders
• Collaborate with cross-functional teams on digital resilience initiatives

Required profile

• Bachelor's degree in economics, engineering, law or a related field
• 3-6 years of experience in ICT governance, risk and compliance, operational resilience, third-party risk management or consulting
• Experience drafting policies, procedures and regulatory documentation
• Nice to have: professional certifications such as CRISC, CISA, CISM, ISO 27001, ISO 22301, and experience in financial services or insurance

Required skills

• Good knowledge of DORA and ICT risk management frameworks
• Understanding of ICT outsourcing and third-party risk management processes
• Strong analytical skills and excellent communication skills
• Ability to interact with multiple stakeholders across functions

What we offer

• Minimum gross annual base salary from EUR 29,000, with possible higher offers and a discretionary/variable bonus
• Health benefit coverage, meal vouchers and welfare allowance
• Internal and Tier 1 learning platforms
• A flat, non-hierarchical structure and ongoing learning opportunities