51 to 75 of 76 DORA Jobs in London

turn the results into a prioritised improvement roadmap. Keep our framework current.* **Maintain security policies, standards and procedures**. Monitor regulatory requirements (e.g. FCA, DORA, GDPR), and support internal and external audits.* **Support client due diligence.** Respond to client and prospect security questionnaires and due diligence requests. ## **About … services.* **Governance exposure.** Experience presenting risk directly to senior management and board-level forums, and shaping how an FCA-regulated asset manager responds to DORA and evolving regulation.* **AI risk and AI-enabled analysis.** Experience assessing the security risk of AI tools, agents and integrations, and using AI to automate ...

operational resilience, and your work will have a broad impact, leveraged by all engineering teams. With upcoming regulations around Operational Resilience such as DORA, software supply chain security is a hot topic and a dynamic space. Our team leverages open-source software (e.g., Syft), influences industry standards for SBOMs ...

working. You manage a portfolio without being chased. Nice to have: Understanding of regulatory frameworks relevant to EMEA clients, such as MiCAR, DORA, the Travel Rule, the Basel crypto‐asset standards, FINMA requirements, or Middle East regimes like VARA (Dubai) and ADGM. Familiarity with custody and key management concepts like ...

security, SOC, threat intelligence, and risk functions across the organization. Responsibilities include designing security elements for new products, ensuring regulatory compliance with TS A, DORA and ISO27001, and #J-18808-Ljbffr ...

control effectiveness to the Group Head of Information Security and relevant governance committees Support regulatory alignment as it relates to AI tool usage, including DORA, UK GDPR and sector-specific AI guidance Act as the internal technical authority and first point of contact for AI security queries across the business … threat models, including prompt injection, data leakage, model access control and agentic tool-use risk Familiarity with regulatory frameworks relevant to the sector, including DORA, UK GDPR, ISO 27001 and NIST CSF Experience running structured risk assessments and translating them into actionable controls Strong stakeholder management, with the confidence ...

risk-based decisions in complex and evolving environments. Preferred Qualifications Familiarity with payment regulatory requirements from Payment Services Directive (PSD2), Digital Operational Resilience Act (DORA), Payment Services Regulation (PSR), Anti-Money Laundering Directive (AMLD) - strong customer authentication, operational resilience, outsourcing, consumer lending, open banking, and financial data protection. Ability ...

greenfield setting. Based in London with hybrid 50/50% work, you will contribute to an IT governance Centre of Excellence and align with DORA standards while ensuring audit readiness across EMEA. #J-18808-Ljbffr ...

Head of Security Company: Aptitude Software Reports to: Chief Product and Technology Officer (CPTO) Location: London, hybrid. The security team is split across the UK and Poland. Type: Permanent, full time Direct reports: Four at ...

Lead GRC Analyst and reporting to the IT GRC Manager, you will support governance, risk, and compliance efforts spanning frameworks such as GDPR, DORA, and Sarbanes-Oxley, partnering with internal and external auditors and control owners across the enterprise. It's an ideal opportunity for someone with 2–3 years … risk — and contribute to risk mitigation plans that address identified vulnerabilities.Partner with HL Compliance to ensure IT systems align with regulations such as GDPR, DORA, and SOX, and other standards relevant to the financial services industry.Conduct assurance activities, including security assessments and issue management, and collaborate with IT teams ...

relevant regulatory requirements, industry standards, and internal company policies. This includes active ownership of infrastructure obligations under financial services regulations such as DORA (Digital Operational Resilience Act), ensuring the region meets resilience, incident reporting, and third-party risk requirements applicable to IT infrastructure. IT Asset Management: Oversee the management … influence and drive outcomes through global chapter structures without direct line authority. Understanding of financial services regulatory requirements relevant to IT infrastructure, including DORA or equivalent operational resilience frameworks. ITIL Certified is preferred We offer in return! Competitive salary & pension scheme, discretionary bonus scheme, 25 days annual leave plus ability ...

Impact By pairing technical depth with executive gravitas, you will de-risk platform modernisation, ensure strict financial and regulatory governance (e.g., BCBS 239, DORA), drive referenceable client outcomes, and unlock measurable business value through intelligence engineering. Requirements What You Bring to the Role Industry Leadership: 15+ years of experience … Azure, GCP, Databricks, Snowflake). Data Governance & Compliance: Robust understanding of data security, lineage, privacy (GDPR, CCPA), and financial sector regulatory frameworks (BCBS 239, DORA, Basel standards) governing financial data engineering. Programme & Delivery Leadership Large-Scale Delivery Track Record: 15+ years in Digital/Data Engineering or IT Consulting, with ...

Genomics England is a global leader in enabling genomic medicine and research, focused on creating a world where everyone benefits from genomic healthcare. Building on the 100,000 Genomes Project, we support the NHS’s ...

About Marex Marex Group plc (NASDAQ: MRX) is a diversified global financial services platform providing essential liquidity, market access and infrastructure services to clients across energy, commodities and financial markets. The group provides comprehensive breadth ...

prototype that production can’t absorb is a failure, not a success. Work inside Insignis's regulatory and operational guardrails — Consumer Duty, FCA SYSC, DORA operational resilience, UK GDPR — and know which constraints bind at prototype stage versus hardening. Pull compliance and ISMS in early, not as a gate … Nice to have — FCA‐regulated fintech, payments, BaaS or open‐banking experience; partner‐integration or white‐label platform work; familiarity with Consumer Duty, or DORA; DDD, Kafka, Kubernetes. Benefits Of The Job: Competitive compensation 25 days holiday (exc. Bank holidays) Pension contributions Private medical insurance Employee health and wellness discounts ...

About Refractal Refractal is an AI security company building the infrastructure organisations need to defend against autonomous AI threats. 2026 has shown that generally capable intelligence is here. The challenge now is modernising security to ...

regulated environment. We are a regulated financial institution, and you would be supporting our compliance capabilities to maintain alignment with PCI-DSS, ISO27001, DORA, and many more. A developer and engineering mindset. A practical understanding of how software is built in a professional environment: not just the ability to write … scaling engineering organisation builds software securely. Direct exposure to banking-licence-scale security work in a regulated payments environment, with PCI DSS, DORA, and GDPR as live constraints on the work. Room to grow: Building and growing your own capability is mutually beneficial, and we want to support ...

The role of Microsoft Modern Work & AI Consultant is to be a senior technical and consultative resource within ITRM, specialising in Microsoft 365, Azure, Copilot, and AI-driven solutions. This role involves owning delivery workstreams ...

Certa is the AI-first third-party operating system. Enterprises, from the Fortune 500 to fast-growing startups, use our no-code platform to onboard, assess, and monitor their vendors, suppliers, and partners across risk ...

pension and bonus Requirements : experience with IT Service Management, governance, operational resilience or technology control environments, ITIL, COBIT, Knowledge of financial services regulations including DORA, FCA/PRA Operational Resilience, ECB ICT expectations and SOX. We're looking for an IT Service Delivery Operational Governance Manager, Vice President … looking for someone with: Strong IT Service Management governance experience within a complex, regulated technology environment. Knowledge of ITIL, COBIT, Operational Resilience, DORA, FCA, PRA, SOX and related technology control frameworks. Excellent stakeholder management, reporting, analytical and influencing skills, with the ability to challenge effectively and drive accountability across Technology ...

strategic and technical levels, supporting board-level decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary … . Oversee DLP and DDA monitoring strategies. Compliance & Regulatory Alignment Support ISMS implementation aligned with ISO 27001. Ensure alignment with GDPR, PCI‐DSS, DORA, NIST CSF, COBIT, SANS, and related frameworks. Develop security policies, SOPs, and governance documentation. Conduct IT resilience and cloud security audits. Technical & Transformation Advisory Advise ...

NCSC Cyber Assessment Framework (CAF) v4.0. Second, it builds the compliance service we offer clients covering the same standards plus UK GDPR and DORA: configuring the tools, writing the templates and collateral, and delivering the first engagements. Core systems Compliance Manager GRC (Kaseya): frameworks, assessments, evidence collection, risk register (administrator … compliance service Build the service from the written strategy, covering ISO 9001, ISO 27001, ISO/IEC 42001, Cyber Essentials Plus, UK GDPR and DORA Readiness, ad-hoc compliance and gap assessments, with a standard method and report Internal audit support for clients (certification itself is carried out by accredited ...

Prime Brokerage Tech Development Lead - (SVP) About Citi Engineer the future of global finance. At Citi, our Tech teamdoesn’tjust support finance – we are helping to redefine it. Every day, $5 trillion crosses through our ...

ISAE 3402 and ISAE 3000 engagements, certification programmes such as ISO 27001 and ISO 42001, and assurance projects focused on regulations including DORA, DSA, DMA, UKGC RTS and GDPR. You’ll be someone with: Experience delivering assurance, audit, compliance or risk engagements relating to technology, cybersecurity, privacy or operational controls. … ISAE 3000, ISO 27001, PCI DSS, HITRUST or other recognised assurance or certification frameworks Understanding of digital regulations and compliance requirements such as DORA, GDPR, UKGC RTS or equivalent frameworks. Experience evaluating the design and operating effectiveness of governance, technology, cybersecurity, privacy and business process controls. Ability to manage multiple ...

infrastructure, payment pipelines and payment pages, wallets holding members' money, the cardholder and personal data behind them, and a regulatory perimeter - PCI DSS, DORA, Bank of Lithuania and FCA rules - that rises every year. Working at staff/senior staff level as an individual contributor embedded in the Payments Engineering … shapes how Vinted Pay defends its infrastructure and payment assets, rather than reacting to the next audit. Turn regulation into engineering: map PCI DSS, DORA, and Bank of Lithuania and FCA requirements into practical, automated security controls and engineering guardrails - compliance as a by‐product of how Vinted Pay builds ...

IT Asset Manager - ITAM physical IT assets ITIL Foundation, CHAMP CITAM Banking This is a new and exclusive opportunity for a IT Asset Manager to take ownership of the lifecycle process for physical IT assets ...