1 to 25 of 76 Permanent DORA Jobs in London

party risk management, with demonstrated expertise in regulatory interpretation and security contract negotiation Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, EU AI Act and related compliance regimes Proven track record of making independent, defensible risk decisions in high-pressure deal environments with measurable business ...

environment meets regulatory expectations, supports operational resilience, and enables secure business growth. Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls. Liaising with key stakeholders, partners and group entities, internal and external. Key Responsibilities Technology Control ...

professionalism, self-motivation, and integrity Preferred qualifications, capabilities, and skills EMEA technology regulatory knowledge is preferred and an understanding of EU regulation (i.e. DORA, EU AI Act, , NIS etc.) Professional IT and Information Security certifications such as CISSP, CISA, CISM, CRISC, CGEIT as well as Cloud related certifications (e.g. CCSP ...

control environment meets regulatory expectations, supports operational resilience, and enables secure business growth.Champion & Ensure delivery against compliance requirements like the Apex Gold standard, NIST, DORA, SOC1 and SOC 2, ISO27001 and all relevant group controls.Liaising with key stakeholders, partners and group entities, internal and external.**Key Responsibilities****Technology Control Framework ...

Cybersecurity Assessments.* Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.).* Have experience (or knowledge) in securing Gen AI for business purposes or enabling Gen AI for security.* Relevant Cybersecurity ...

Preferred Qualifications: Industry certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, Security+, or equivalent. Knowledge of financial services regulations and frameworks, including PRA, FCA, DORA, NIS2, ISO 27001, and NIST. Understanding of emerging technologies such as quantum, agentic progression Understanding of operational resilience, technology resilience, and risk management practices. Familiarity ...

management and security governance practices. Experience working within a regulated environment, ideally financial services. Working knowledge of frameworks such as ISO 27001, NIST CSF, DORA, NIS2 or CIS Controls. Strong stakeholder management skills with the ability to influence, challenge and communicate effective at all levels. *Rates depend on experience ...

impact on analytical and AI use cases. Awareness of AI model lifecycle considerations from an architecture perspective. Understanding of EU regulatory frameworks, including GDPR, DORA, and operational resilience standards Strong understanding of DevOps practices, CI/CD, and infrastructure as code Strong grasp of non‐functional requirements in regulated environments. ...

NIST and ISO 27001 * Experience within financial services or another highly regulated environment * Knowledge of relevant financial-services regulations, ideally including FCA requirements and DORA * Strong understanding of network security principles and controls, including firewalls, IDS/IPS, TCP/IP, DHCP and DNS * Experience of security across Windows, UNIX ...

offering). Understanding of regulatory guidance, FCA guidance FG16/5 (Guidance for firms outsourcing to the ‘cloud’ and other third-party IT services), DORA requirements for Critical Service Provider, C5 requirements of the Federal Office of Information Security of Germany and other applicable standards and requirements. A record ...

models, governance frameworks, and transformation roadmaps. Develop security control frameworks aligned to recognised industry standards and regulatory expectations, including NIST, ISO 27001, CIS, NIS2, DORA, PRA, FCA, and other applicable requirements. Produce high-quality client deliverables including maturity assessments, roadmaps, operating models, business cases, risk assessments, and executive presentations. Maintain ...

testing and resilience validation Ensure resilience is embedded into architecture, engineering and change processes. Partner with 2LOD to ensure alignment with regulatory expectations (e.g. DORA, UK OpRes). Risk Governance & Decisioning Lead 1LoD technology risk governance forums). Provide independent first-line challenge to engineering, architecture, and product teams. Escalate ...

frameworks and standards, including one or more of:SOC 1/ISAE 3402, SOC 2/ISAE 3000, Digital regulations such as DSA, DMA, DORA, GDPR, UKGC RTS, CMMC, TSA-21, ISO, HITRUST. Other recognised assurance or certification frameworks. A demonstrable record of winning and expanding client work, supported ...

observability into delivery pipelines and platforms, including metrics, logs, and traces (e.g., OpenTelemetry), deployment health checks, and automated rollback signals; Implement and report on DORA and deployment reliability metrics (deployment frequency, lead time, change failure rate, MTTR); Support SRE‐aligned practices such as error budgets, runbooks, and post‐incident reviews ...

quality and risk treatment approaches. Regulatory Compliance & Oversight Support implementation of technology, cyber security and operational resilience requirements applicable to Regulatory Reporting Solutions, including DORA obligations and relevant regulatory reporting expectations. Assist in translating regulatory obligations into practical control requirements and governance processes. Coordinate evidence gathering and responses for regulatory ...

NIST, ISO) and a track record of applying security controls in an FCA-regulated environment, with an understanding of key regulatory guidelines (e.g., GDPR, DORA). Threat Detection & Cloud Security: Experience with intrusion detection, prevention, and management (e.g., SIEM) alongside vulnerability management on cloud systems and applications (ideally ...

advantageous. Independent and relevant certifications (such as CISSP, CISM, CCSP or equivalent) are advantageous. Knowledge of industry frameworks such as NIST, ISO 27001, DORA, governance and regulatory compliance is desirable but not essential. Strong communication and stakeholder management skills, with the ability to work collaboratively across sales, delivery, partners ...

technical credibility, practical risk judgement and executive communication capability. Knowledge NIST Cybersecurity Framework ISO 27001 and ISO 27002 CIS Controls Relevant regulations such as DORA Security architecture principles Cyber threat and attack-path analysis Cloud security and cyber resilience Cyber risk management and control assurance Regulatory expectations in a highly ...

Ensure consistent deployment and operationalisation of Microsoft security capabilities at scale, across a complex, hybrid estate Ensure alignment with regulatory requirements such as TSA, DORA and ISO27001 Drive adoption of Secure by Design principles across Microsoft-based platforms and solutions Define and implement security and governance controls for Microsoft Copilot ...

Deep knowledge of Supply Chain/Vendor Risk Management practices and methodologies. Understanding of common risk and compliance frameworks(e.g. ISO 27001, NIST CSF, DORA, NIS2, SOC 2) and how they apply to third-party risk programmes. Strong understanding of the sales process from initiation to close. A proven track ...

Security Agentic AI Frameworks MCP (Model Context Protocol) Knowledge of DevSecOps, Infrastructure as Code and Security Automation. Understanding of regulatory and compliance frameworks including: DORA FCA requirements ISO 27001 NIST Certifications The following certifications would be highly beneficial: SABSA (preferred) CISSP TOGAF CCSP Azure Security Certifications Other relevant security ...

Finance and vendors on priorities Experience with M&A system integrations, HR technology vendor selections/RFPs, or regulated environments (e.g., GDPR, DORA, SOX), combined with a continuous‐improvement mindset Why Choose Fitch: Hybrid Work Environment: 2 to 3 days a week in office required based on your line ...

model cards and AI system registers• Lead compliance with AI-relevant regulations: EU AI Act, GDPR data minimisation in AI pipelines, FCA AI guidance, DORA• Work with AI delivery teams to embed governance into AI development: reviewing training data for bias, assessing AI outputs for fairness• Define data ...

scalable infrastructure systems and capabilities. Own the operational stability of production systems ("You Build It, You Run It"), automating recurring issues and establishing DORA/SLIs/SLOs metrics for continuous improvement. Drive architectural standards and best practices across the organisation, leading technical evaluations with internal and external partners. Champion ...

post-trade infrastructures (e.g., CSDs). Background in Identity & Access Management (IAM), PKI, cryptography, or resilience architectures. Exposure to European regulatory frameworks (NIS2, DORA, GDPR). Daily rate contract - rate flexible, dependent on experience. Hybrid model: 8 days onsite per month (Belgium, Amsterdam, London, or Paris), remainder remote. Long-term ...