1 to 25 of 41 Permanent DORA Jobs in the UK excluding London

regulatory compliance function. Strong knowledge of EU cybersecurity regulations, including NIS2 and the Cyber Resilience Act (CRA), or experience with frameworks such as GDPR, DORA, and ISO 27001 with the ability to quickly build expertise in emerging regulations. Proven experience developing, implementing, or maturing compliance programs, helping organizations strengthen governance ...

Cybersecurity Assessments.* Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.).* Have an understanding of the future of Gen AI and the impact on cyber security.* Relevant Cybersecurity qualifications such ...

Cybersecurity Assessments.* Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.).* Have experience (or knowledge) in securing Gen AI for business purposes or enabling Gen AI for security.* Relevant Cybersecurity ...

Cybersecurity Assessments.* Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.).* Have experience (or knowledge) in securing Gen AI for business purposes or enabling Gen AI for security.* Relevant Cybersecurity ...

holding, a relevant certification (e.g., CBCI, working towards MBCI, CRISC, or equivalent). Exposure to additional regulatory compliance frameworks (e.g., NIST, SOC 2, DORA). Experience working within a technology, fintech, or payments environment. Familiarity with GRC platforms or risk management and reporting tools. Experience supporting business continuity exercises (e.g. ...

governance policies, security standards and architectural best practice, and help maintain continuous compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting and root cause analysis that drives systemic ...

governance policies, security standards and architectural best practice, and help maintain continuous compliance evidence against the firm’s obligations (SOC 2, ISO 27001, GDPR, DORA). Contribute to observability and monitoring across the estate, and to incident response and on-call, including troubleshooting and root cause analysis that drives systemic ...

strong understanding of how operational resilience regulation shapes design — important business services and impact tolerances (e.g. FCA/PRA/Bank of England), DORA, third-party and concentration risk, and resilience testing expectations. Proven ability to operate as a trusted advisor to senior stakeholders — shaping strategy, building the business case ...

automate guardrail enforcement. Cloud Security & Compliance: Working knowledge of cloud security controls and frameworks (ISO 27001, SOC 2, NIST; awareness of NIS2 and DORA) to assure secure-by-design. Continuous Improvement: Turning recurring incidents and problems into standards, patterns, and automation guardrails. Knowledge Management: Disciplined documentation, runbooks, CMDB/service ...

integration and regulatory compliance Financial Services & Regulatory Compliance Ensure all architectural and operational activities adhere to financial services regulations and frameworks (e.g., FCA, PRA, DORA, ISO 27001, SOC) Maintain robust documentation, audit trails, and compliance validation for all network changes and deployments Integrate regulatory requirements, security controls, and zero trust ...

conducting risk assessments, control reviews, audits, or assurance activities. Technical knowledge of information security frameworks and standards including ISO27001, NIST Cybersecurity Framework, CIS Controls, DORA, PCI-DSS, and related security practices. Strong communicator with positive influencing and interpersonal skills. Ability to synthesise complex technical and business information and present findings ...

posture management. Strong working knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer-facing consultancy, reference architectures, repeatable deployment patterns and alignment ...

outcomes.* Drive adoption of modern architectures (microservices, event-driven systems) and cloud-native technologies.* Institutionalise modern engineering practices and drive metrics-led improvement using DORA + cost-to-serve.* Own CI/CD strategy (pipeline standardisation, policy as code, quality gates, security scanning) and implement test automation at all levels. ...

regulatory, client, and internal requirements. The role partners with business, technology, audit, and group stakeholders to drive practical compliance outcomes across PCI DSS, DORA, and other regulatory and risk frameworks, internal control assurance, security awareness compliance, and client due diligence activity. Crucial to this role is helping maintain PayTech ...

Support governance, reporting, audit readiness and continuous improvement. Implement automation and operational best practices where applicable. Required Experience - 9+ years Technical Skills - CVSS, NIST, DORA, ISO 27001, Cyber Defence Preferred Skills Enterprise-scale operations experience, stakeholder management, automation mindset, strong analytical and problem-solving capabilities. Benefits A supportive, diverse ...

into developer tooling and platform capabilities, not operated separately Contribute to standardisation of release patterns across SaaS products Continuous Improvement & Metrics Define and track DORA-style metrics (deployment frequency, lead time, change failure rate, recovery time) Drive continuous improvement through data-led insights Contribute to the evolution of ICT DevOps ...

track record managing enterprise-scale vulnerability remediation programmes Experience operating within complex, global organisations Exposure to regulatory environments such as NIST SP 800-40, DORA, FCA/PRA requirements, ISO 27001 and NIST Cybersecurity Framework Strong understanding of risk-based vulnerability prioritization Proven ability to leverage AI tools to enhance ...

best practices for coding, testing, and CI/CD. Drive a culture of quality and continuous improvement in SDLC and DevOps, using metrics like DORA to boost efficiency. Lead system architecture, design, planning, and estimation discussions with technical teams and business stakeholders. Translate complex business requirements into detailed technical specifications. ...

governance, risk reporting, regulatory engagement, and continuous control improvement. The function supports both global initiatives and regional regulatory requirements, including Digital Operational Resilience Act (DORA), operational resilience frameworks, and technology risk management programs.Position OverviewThe Technology Controls Office (TCO) Specialist supports the governance, oversight, and execution of technology risk, resilience, compliance … standards and applicable regulatory expectations.Drive continuous improvement initiatives to strengthen resilience capabilities, recovery readiness, and testing maturity.Regulatory Compliance, Audit & GovernanceSupport regulatory compliance initiatives, including DORA, Operational Resilience, EBA Guidelines, and other applicable technology risk requirements.Coordinate responses to regulatory reviews, examinations, and information requests.Support internal and external audits through stakeholder coordination ...

governance, risk reporting, regulatory engagement, and continuous control improvement. The function supports both global initiatives and regional regulatory requirements, including Digital Operational Resilience Act (DORA), operational resilience frameworks, and technology risk management programs. **Position Overview** The Technology Controls Office (TCO) Specialist supports the governance, oversight, and execution of technology risk … regulatory expectations.* Drive continuous improvement initiatives to strengthen resilience capabilities, recovery readiness, and testing maturity. **Regulatory Compliance, Audit & Governance** * Support regulatory compliance initiatives, including DORA, Operational Resilience, EBA Guidelines, and other applicable technology risk requirements.* Coordinate responses to regulatory reviews, examinations, and information requests.* Support internal and external audits through ...

vendor selection, buy vs build decisions and technology investments. Ensure solutions meet the security, resilience and regulatory expectations of a financial services environment, including DORA and the EU AI Act. Help optimise cloud costs and ensure our technology estate remains scalable and fit for the future. What we're looking ...

Harness.io), Docker, Kubernetes, AWS , FastAPI or similar for internal services, and tracing/evaluation tooling. Particularly valuable: developer productivity or developer experience engineering, DORA-style measurement, platform engineering, RAG and vector search, deploying and evaluating self-hosted open-weight models, or experience in a regulated or customer-facing environment such ...

Black Hat, BSides, AI Village), or a CVE record. Detection engineering experience, or familiarity with CREST, PCI DSS, CBEST/TIBER‐EU, or DORA threat‐led testing. I Know I Have Done A Great Job If: Delivering high‐quality network, web, API, cloud and red‐team engagements that provide clear ...

governance, risk reporting, regulatory engagement, and continuous control improvement. The function supports both global initiatives and regional regulatory requirements, including Digital Operational Resilience Act (DORA), operational resilience frameworks, and technology risk management programs. Position Overview The Technology Controls Office (TCO) Specialist supports the governance, oversight, and execution of technology risk … regulatory expectations. Drive continuous improvement initiatives to strengthen resilience capabilities, recovery readiness, and testing maturity. Regulatory Compliance, Audit & Governance Support regulatory compliance initiatives, including DORA, Operational Resilience, EBA Guidelines, and other applicable technology risk requirements. Coordinate responses to regulatory reviews, examinations, and information requests. Support internal and external audits through ...

engineering environments (regulated change processes, security constraints) Experience contributing to or maintaining internal developer platforms or golden path tooling Knowledge of software delivery metrics (DORA, cycle time, deployment frequency) and how to improve them Job responsibilities Key Responsibilities Deploy into product squads as part of the discovery and landing phase ...