DORA Compliance & Risk Consultant

Project overview

🔹 For our Client from banking industry we are looking for DORA Compliance & Risk Consultant🔹

Possible location in Poland : Gdynia preferred; Gdańsk as an alternative (3 days per week from office)

Support Nordic financial institutions in assessing their readiness for the EU Digital Operational Resilience Act (DORA). The consultant will conduct requirements-to-controls mapping, evaluate control design effectiveness together with internal stakeholders, map risk appetite levels to controls and DORA requirements, as well as review evidence, identify gaps, and facilitate stakeholder workshops to deliver a robust, quality-assured DORA gap assessment.

Responsibilities

Contributing to the following Deliverables

• Interpret DORA ICT risk management and digital operational resilience requirements in a financial-services context.
• Translate DORA requirements into practical control expectations and assessment criteria.
• Perform requirements-to-controls mapping across policies, processes, systems, and governance arrangements.
• Conduct gap assessments, documenting current-state maturity, compliance gaps, risks, and remediation recommendations.
• Assess control design effectiveness and, where applicable, operating effectiveness.
• Review and challenge evidence provided by stakeholders, ensuring it is complete, relevant, traceable, and sufficient to support conclusions.
• Apply quality assurance to assessment outputs, including evidence records, control evaluations, gap statements, and final reporting.
• Lead workshops, interviews, and working sessions with business, technology, risk, compliance, internal audit, and third-party management stakeholders.
• Facilitate clear decision-making, manage actions, and communicate findings to senior stakeholders.
• Produce high-quality deliverables, including assessment workpapers, control matrices, gap logs, remediation roadmaps, and management presentations.
• DORA requirements-to-controls matrix
• Current-state assessment and evidence inventory
• Control design and operating-effectiveness assessment results
• Prioritized DORA gap register
• Remediation recommendations and roadmap
• Workshop outputs and stakeholder action tracking
• Quality-assured final assessment report and executive summary

Requirements

Proven experience conducting:

Client code: BN01

Contact person: [contact removed]

Do you know someone who would fit this position? Recommend a candidate by sending her/his CV to: [contact removed]

Whistleblowing Policy, which provides guidelines for reporting misconduct can be found on Ework website: https://www.eworkgroup.com/about-us/our-responsibility

• Demonstrable hands-on experience with DORA, particularly ICT risk management and digital operational resilience requirements.
• Strong understanding of ICT risk, IT governance, operational resilience, third-party ICT risk, incident management, and testing requirements within financial institutions.
• Regulatory or control-framework gap assessments
• Requirements-to-controls mapping
• Control design effectiveness assessments
• Operating effectiveness testing or assurance reviews
• Evidence review and quality assurance
• Experience working in a Nordic or broader European financial-services environment, such as banks, insurers, pension funds, asset managers, or regulated financial infrastructure providers.
• Ability to turn regulatory requirements into clear, pragmatic control requirements and remediation actions.
• Strong workshop leadership and stakeholder facilitation skills, including the ability to engage both technical and non-technical audiences.
• Excellent written and verbal English communication skills. A Nordic language is advantageous.

Project details

• Start: 2026-11-16
• Remote: hybrid
• Location: Gdansk, Poland; Gdynia, Poland, PL
• Rate: 160-160 EUR/h