Cyber Resilience Officer with DORA

London
1 month ago
Applications closed

Related Jobs

View all jobs

Senior Risk and Compliance Manager

Senior Risk and Compliance Manager

Chief Information Security Officer

Chief Information Security Officer

Cyber Security Analyst - IT

IAM Specialist

Cyber Resilience Officer with DORA

Our Client is an international bank with offices based in Central London.

They are looking to recruit a Cyber Transformation expert with experience of DORA.

The purpose for this new role is to support the Business Transformation, Resilience & Oversight Manager and the direct team in both: 1) the execution/ongoing management of the banks Cyber Resilience activities & also 2) the new Cyber Security and Digital Operational Resilience Act (DORA) related capabilities.

This is an opportunity for a motivated self-starter, with a can-do mindset and the ability to connect information from various sources to help build a connected resilient organisation.

The candidate will have the opportunity to strengthen and demonstrate strong knowledge of cyber resilience and the new DORA requirements that came into effect in January 2025.

Accountabilities and Duties:

This is an overview list of responsibilities. Collaborating with your line manager, you will develop your own objectives by focusing on the below and more.

  • Support stakeholders across the Bank in assessing, understanding and managing cyber risk and bringing awareness on the topic.

  • Conduct gap analysis and provide solutions to ensure compliance and alignment with DORA requirements.

  • Support DORA compliance by coordinating the activities required across all six pillars of DORA: ICT Risk Management, ICT related Incident Reporting, Digital Resilience Testing, Information Sharing, ICT Third Party Risk and General Governance Principles.

  • Stay up to date with the changing cyber risk landscape, emerging threats, regulatory requirements and cybersecurity industry best practises in the UK and EU (e.g. Network and Information Security (NIS2) Directive).

  • Plan and execute DORA deliverables in cooperation with similar initiatives e.g. Operational Resilience, Business Continuity and Incident Management.

  • Design and oversee regular testing exercises to evaluate the effectiveness of Digital Resilience and Cyber Security, contributing to the Bank’s overall resilience.

  • Collaborate with various teams and departments including close partnership with the IT and Risk teams to drive a collaborative firm-wide approach to cyber resilience.

  • Conduct reviews on third parties’ cyber resilience as part of the third-party risk management process.

  • Act as cyber resilience SME and champion on projects/change initiatives.

    Experience Required:

  • Around 5 years of experience within Financial Services or Consultancy (familiarity with banking products and services).

  • Comprehensive understanding and experience of cyber resilience principles/practises including experience in information security, business continuity planning, business impact assessments, crisis management and cyber security.

  • Working knowledge and/or expertise of ISO27001, NIST, CAF or other industry standards.

  • Knowledge and general understanding of EU Digital Operational Resilience Act (DORA) and Network and Information Security (NIS2) Directive.

  • Knowledge of EBA Outsourcing Guidelines, PRA SS2/21 (Outsourcing and TPRM), ESMA Guidelines on Outsourcing to Cloud Service Providers and UK Operational Resilience regulatory requirements are advantageous.

  • A team player with the ability to work independently and to manage and prioritise work to meet set deadlines.

  • Excellent problem solving and analytical skills with the ability to adapt within a changing environment.

  • Solid presentation skills with experience of facilitating meetings and workshops at all seniority levels.

  • Great communicator with the ability to build relationships (both 1-to-1 and through existing governance forums) and influence key stakeholders.

  • Strong expertise in using Microsoft applications (including Excel, Visio). Previous experience in producing PowerPoint

  • presentations for senior management/audiences.

    Salary circa £70K - £90K

    The position is hybrid 3 days a week in the office in Central London.

    Do send your CV to us in Word format along with your salary and notice period

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Portfolio Projects That Get You Hired for Cyber Security Jobs (With Real GitHub Examples)

With rising cyber threats and increasingly sophisticated attacks, cyber security has become a critical priority for organisations worldwide. From penetration testers (pentesters) and SOC analysts to cloud security engineers and threat intelligence specialists, the demand for skilled cyber security professionals continues to surge. But how do you stand out in a growing field? Alongside your CV, an impressive cyber security portfolio can be the distinguishing factor that convinces employers you’re the right fit. In this comprehensive guide, you’ll discover: Why a cyber security portfolio is essential for job seekers in this domain. How to align portfolio projects with different cyber security career paths. Real GitHub examples that demonstrate best practices in security-focused projects. Actionable project ideas you can start today, from penetration testing labs to blue-team detection pipelines. Best practices for organising your repos and presenting your work so hiring managers can instantly see your impact. When you’re ready to pursue your next opportunity, remember to upload your CV on CyberSecurityJobs.tech. Our specialised platform connects talented security professionals with employers who need your expertise—exactly what your portfolio will showcase.

Cyber Security Job Interview Warm‑Up: 30 Real Coding & System‑Design Questions

The need for skilled cyber security professionals has never been greater. As organisations rapidly digitise their operations and store increasing amounts of sensitive data online, cyber threats loom large—ranging from sophisticated ransomware attacks to insider threats and state‑sponsored espionage. Against this backdrop, cyber security jobs remain some of the most in‑demand and mission‑critical roles on the market. If you’re preparing for a cyber security interview, expect to be tested on a broad spectrum of topics—from secure coding and incident response to network security architecture and compliance standards. In many cases, companies also include problem‑solving exercises and system design scenarios to gauge how well you can apply theoretical knowledge to real‑world threats. To help you ace these assessments, we’ve compiled 30 real coding & system‑design questions you might encounter. Each reflects a key area of cyber security—whether it’s encryption and key management, threat modelling, or designing a zero‑trust network. Along the way, we’ll offer insights and best practices so you can stand out from the crowd. If you’re on the lookout for exciting cyber security roles in the UK, head to www.cybersecurityjobs.tech. There, you’ll discover a range of positions—covering everything from penetration testing and threat intelligence to compliance management and security operations. Let’s dive into the essentials of interview readiness.

Negotiating Your Cybersecurity Job Offer: Equity, Bonuses & Perks Explained

How to Secure Compensation That Reflects Your Value in the UK’s High-Stakes Cybersecurity Sector Introduction As cyber threats grow more sophisticated and frequent, cybersecurity professionals have never been more in demand. From thwarting ransomware attacks to architecting secure cloud infrastructures, mid‑senior cybersecurity experts play a critical role in safeguarding a company’s data and reputation. Thanks to this growing reliance on cybersecurity, employers in the UK are going above and beyond simple salary offers to attract the top echelon of talent. Although base salary remains a key component of any job offer, the broader package—encompassing equity, bonuses, and perks—can often surpass what you’d gain from a small bump in monthly pay. For cybersecurity specialists working in areas such as threat intelligence, incident response, penetration testing, or compliance, the complexity and risk mitigation you bring to the table is massive. Knowing how to negotiate the entire package ensures you are duly rewarded for keeping an organisation’s data, assets, and operations safe. In this guide, we’ll delve into every aspect of negotiating a cybersecurity job offer. Whether you’re pivoting to a mid‑senior role or cementing your expertise at an established security consultancy, understanding the full range of compensation elements will help you secure an offer that acknowledges the criticality of what you do. Let’s explore equity options, performance bonuses, and the perks that matter most, so you can come out of your next job negotiation confident that you’re getting more than just a salary.