Cyber Resilience Specialist- DORA

Michael Page Technology

Take the lead in developing, maintaining, and implementing frameworks, policies, and procedures in relation to key areas of cyber resilience, to ensure preparedness for the Digital Operational Resilience Act (DORA) deadlines in 2025. Policies and procedures on cyber resilience testing, including pen. Consistent with regulatory requirements and industry best practice.

Client Details

My client – a critical health care organisation in the Financial Services industry are looking for a Cyber Resilience Specialist- DORA – join their site in London on an initial 6-month contract! (Hybrid working- 3 days p/week office based, 2 days p/week in the office)

Description

The successful candidate for the Cyber Resilience Specialist- DORA – Financial Services Sector 6-month contract role will fulfil the following responsibilities:

• Delivery of policies, procedures and frameworks procedures in relation to key areas of cyber resilience, to ensure preparedness for the Digital Operational Resilience Act (DORA) and UK Operational Resilience regime deadlines in 2025. These should be compliant with regulatory requirements and incorporate best practice.
• Delivery of our second horizon scanning pilot, developing our strategic reporting capability and enhancing the actionability of insights for the business. This will refine our reporting and processes based on feedback from Pilot 1.
• Effective handovers to ensure deliverables are embedded into BAU as part of an ongoing cyber resilience capability.
• Responsible for reporting on key metrics in relation to the cyber resilience workstream of the DORA and Operational Resilience project, and escalating issues for management attention. This includes providing input into key governance forums.
• Responsible for identifying policy and process requirements and developing appropriate documentation and processes to support compliance with DORA and UK Operational Resilience.
• Responsible for providing valuable insight into regulatory expectations, industry approaches and best practice to inform our processes and structures.
• Responsible for maintaining records and metrics on project progress for cyber resilience deliverables, developing recommendations and ensuring timely escalation of issues.o Responsible for delivering our second horizon scanning pilot, refining our reporting and processes based on feedback from Pilot 1

Profile

To be considered for the Cyber Resilience Specialist- DORA – Financial Services Sector contract role the candidate must present evidence of the following:

• Very good knowledge of regulatory requirements under DORA and the UK Operational Resilience regime, with experience of delivering against the requirements of such regulations within regulated financial services.
• Knowledge & understanding of relevant frameworks such as NIST, ITIL, and ISO27001.
• Formal security certifications required: CompTIA Security+ minimum, qualifications such as CISSP / CRISC beneficial.
• Excellent knowledge of industry best practice in relation to cyber resilience and a proven ability to use this to inform effective business solutions, policies, and processes.
• Degree in computer science or similar, or equivalent work experience.
• Experience of handling and using cyber threat intelligence to deliver effective solutions to businesses to enhance resilience, within a regulated environment, preferably within financial services. This includes track record of maintaining confidentiality and effective handling of sensitive information in line with organisational policy.
• Excellent stakeholder management, communications (both written and verbal) and influencing skills. This includes the ability to work independently or as part of a team, and a demonstrable ability to communicate complex technical issues to a non-technical audience.
• Strong analytical and problem-solving skills applied to complex technical problems.
• Demonstrable ability to approach issues strategically, with an ability to develop pragmatic and compliant solutions to cyber security issues.
• Experience of vulnerability management programmes, ideally within financial services, including delivery of remediation activity desirable.
• Experience of delivering cyber resilience testing, such as penetration testing or cyber exercising, within a regulated corporate environment, preferably Financial Services is desirable.

Job Offer

• 6 month contract with opportunity to extend.
• £585 daily inside IR35.
• Hybrid working- days p/week office based, 3 days p/week home based.
• Office nearby to Liverpool St/ City of London/ banking district.