About the Role
You will strengthen and scale the third-party and ICT risk framework, including the related policies, procedures, and governance standards. You will assess providers, maintain outsourcing and ICT arrangement records, monitor performance and incidents, report exposure to management and the board, map critical dependencies, and support DORA compliance activities.
Responsibilities
•Strengthen the third-party and ICT risk framework, policies, procedures, and governance standards
•Conduct due diligence on providers across operational, ICT, compliance, and financial risk
•Challenge provider assessments when evidence does not support conclusions
•Maintain the register of outsourcing and ICT third-party arrangements
•Monitor provider performance, incidents, and concentration risk
•Escalate material provider risks
•Build KRIs, dashboards, and reporting on third-party exposure
•Map critical or important functions, provider dependencies, exit strategies, and substitutability
•Support DORA implementation, including contractual requirements, regulatory information, and incident and resilience testing obligations
•Assess contractual arrangements for DORA-required provisions and governance approval
Benefits
•Stock options sign-on bonus
•Equipment for the job
•30 days of paid holidays
•Hybrid work-from-home option
•Ability to work abroad for 4 months per year
