1 to 25 of 112 Permanent DORA Jobs in England

party risk management, with demonstrated expertise in regulatory interpretation and security contract negotiation Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, EU AI Act and related compliance regimes Proven track record of making independent, defensible risk decisions in high-pressure deal environments with measurable business ...

environment meets regulatory expectations, supports operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology Control ...

professionalism, self-motivation, and integrity Preferred qualifications, capabilities, and skills EMEA technology regulatory knowledge is preferred and an understanding of EU regulation (i.e. DORA, EU AI Act, , NIS etc.) Professional IT and Information Security certifications such as CISSP, CISA, CISM, CRISC, CGEIT as well as Cloud related certifications (e.g. CCSP ...

regulatory compliance function. Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber Resilience Act (CRA), or experience with frameworks such as GDPR, DORA, and ISO 27001 with the ability to quickly build expertise in emerging regulations. Proven experience developing, implementing, or maturing compliance programs, helping organizations strengthen governance ...

control environment meets regulatory expectations, supports operational resilience, and enables secure business growth.Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls.Liaising with key stakeholders, partners and group entities, internal and external.**Key Responsibilities****Technology Control Framework ...

Cybersecurity Assessments.* Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.).* Have an understanding of the future of Gen AI and the impact on cyber security.* Relevant Cybersecurity qualifications such ...

Cybersecurity Assessments.* Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.).* Have experience (or knowledge) in securing Gen AI for business purposes or enabling Gen AI for security.* Relevant Cybersecurity ...

Cybersecurity Assessments.* Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.).* Have experience (or knowledge) in securing Gen AI for business purposes or enabling Gen AI for security.* Relevant Cybersecurity ...

Preferred Qualifications: Industry certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, Security+, or equivalent. Knowledge of financial services regulations and frameworks, including PRA, FCA, DORA, NIS2, ISO 27001, and NIST. Understanding of emerging technologies such as quantum, agentic progression Understanding of operational resilience, technology resilience, and risk management practices. Familiarity ...

holding, a relevant certification (e.g., CBCI, working towards MBCI, CRISC, or equivalent). Exposure to additional regulatory compliance frameworks (e.g., NIST, SOC 2, DORA). Experience working within a technology, fintech, or payments environment. Familiarity with GRC platforms or risk management and reporting tools. Experience supporting business continuity exercises (e.g. ...

management and security governance practices. Experience working within a regulated environment, ideally financial services. Working knowledge of frameworks such as ISO 27001, NIST CSF, DORA, NIS2 or CIS Controls. Strong stakeholder management skills with the ability to influence, challenge and communicate effective at all levels. *Rates depend on experience ...

impact on analytical and AI use cases. Awareness of AI model lifecycle considerations from an architecture perspective. Understanding of EU regulatory frameworks, including GDPR, DORA, and operational resilience standards Strong understanding of DevOps practices, CI/CD, and infrastructure as code Strong grasp of non‐functional requirements in regulated environments. ...

governance policies, security standards and architectural best practice, and help maintain continuous compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting and root cause analysis that drives systemic ...

governance policies, security standards and architectural best practice, and help maintain continuous compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting and root cause analysis that drives systemic ...

NIST and ISO 27001 * Experience within financial services or another highly regulated environment * Knowledge of relevant financial-services regulations, ideally including FCA requirements and DORA * Strong understanding of network security principles and controls, including firewalls, IDS/IPS, TCP/IP, DHCP and DNS * Experience of security across Windows, UNIX ...

offering). Understanding of regulatory guidance, FCA guidance FG16/5 (Guidance for firms outsourcing to the ‘cloud’ and other third-party IT services), DORA requirements for Critical Service Provider, C5 requirements of the Federal Office of Information Security of Germany and other applicable standards and requirements. A record ...

models, governance frameworks, and transformation roadmaps. Develop security control frameworks aligned to recognised industry standards and regulatory expectations, including NIST, ISO 27001, CIS, NIS2, DORA, PRA, FCA, and other applicable requirements. Produce high-quality client deliverables including maturity assessments, roadmaps, operating models, business cases, risk assessments, and executive presentations. Maintain ...

testing and resilience validation Ensure resilience is embedded into architecture, engineering and change processes. Partner with 2LOD to ensure alignment with regulatory expectations (e.g. DORA, UK OpRes). Risk Governance & Decisioning Lead 1LoD technology risk governance forums). Provide independent first-line challenge to engineering, architecture, and product teams. Escalate ...

frameworks and standards, including one or more of:SOC 1/ISAE 3402, SOC 2/ISAE 3000, Digital regulations such as DSA, DMA, DORA, GDPR, UKGC RTS, CMMC, TSA-21, ISO, HITRUST. Other recognised assurance or certification frameworks. A demonstrable record of winning and expanding client work, supported ...

observability into delivery pipelines and platforms, including metrics, logs, and traces (e.g., OpenTelemetry), deployment health checks, and automated rollback signals; Implement and report on DORA and deployment reliability metrics (deployment frequency, lead time, change failure rate, MTTR); Support SRE‐aligned practices such as error budgets, runbooks, and post‐incident reviews ...

quality and risk treatment approaches. Regulatory Compliance & Oversight Support implementation of technology, cyber security and operational resilience requirements applicable to Regulatory Reporting Solutions, including DORA obligations and relevant regulatory reporting expectations. Assist in translating regulatory obligations into practical control requirements and governance processes. Coordinate evidence gathering and responses for regulatory ...

NIST, ISO) and a track record of applying security controls in an FCA-regulated environment, with an understanding of key regulatory guidelines (e.g., GDPR, DORA). Threat Detection & Cloud Security: Experience with intrusion detection, prevention, and management (e.g., SIEM) alongside vulnerability management on cloud systems and applications (ideally ...

advantageous. Independent and relevant certifications (such as CISSP, CISM, CCSP or equivalent) are advantageous. Knowledge of industry frameworks such as NIST, ISO 27001, DORA, governance and regulatory compliance is desirable but not essential. Strong communication and stakeholder management skills, with the ability to work collaboratively across sales, delivery, partners ...

technical credibility, practical risk judgement and executive communication capability. Knowledge NIST Cybersecurity Framework ISO 27001 and ISO 27002 CIS Controls Relevant regulations such as DORA Security architecture principles Cyber threat and attack-path analysis Cloud security and cyber resilience Cyber risk management and control assurance Regulatory expectations in a highly ...

Ensure consistent deployment and operationalisation of Microsoft security capabilities at scale, across a complex, hybrid estate Ensure alignment with regulatory requirements such as TSA, DORA and ISO27001 Drive adoption of Secure by Design principles across Microsoft-based platforms and solutions Define and implement security and governance controls for Microsoft Copilot ...