The DORA Programme Lead is a critical second-line function responsible for leading the strategic development, implementation, and management of the organisation's programme to comply with the Digital Operational Resilience Act (DORA). This role involves providing subject matter expertise on DORA, managing the DORA implementation project, and owning the reporting to senior management and relevant forums. The role requires an understanding of the DORA requirements, excellent project management skills, and the ability to influence and collaborate with stakeholders across the organization.
Qualifications
Essential skills and experience:
1. Extensive experience in regulatory compliance, project management, or a related field, with a proven track record in leading complex projects.
2. Understanding of DORA requirements and experience leading similar implementation projects.
3. Strong knowledge of UK, EU, and international regulations related to operational resilience, cybersecurity, and risk management.
4. Excellent project management skills, including experience developing and managing project plans, tracking progress, and managing risks and issues within JIRA.
5. Strong communication and presentation skills, with the ability to effectively communicate complex information to a variety of audiences.
6. Proven ability to collaborate with senior management to define and execute strategic initiatives.
Preferred Skills and experience:
1. Experience working in the financial services industry.
2. Relevant certifications such as PMP, PRINCE2, or a related certification.
3. Experience with risk management frameworks and methodologies.
4. Experience with IT governance and control frameworks.
Education is important to us; ideally, you’ll have a degree, but if that’s not the case and you have extensive experience/skills you feel are relevant and beneficial to the role, we are open to discussing your suitability.
If you are concerned about applying due to disability, please contact us; we’re an inclusive team and would like to discuss what adjustments we can make to support your application.
Note: Banking and Compliance training including fair treatment of customers is mandatory for all FCE employees. Necessary training will be given to any successful candidates that require it.
Ford is committed to diversity and equality of opportunity for all and is opposed to any form of less favourable treatment or harassment on the grounds of gender, marital status, civil partnership status, parental status, race, ethnic origin, colour, nationality, national origin, disability, sexual orientation, religion/belief, gender reassignment and gender identity, age and those with caring responsibilities.
Responsibilities
DORA Programme Leadership:
1. Support process to adapt tooling (for incidents management, asset management, CIFs, etc) to DORA needs, currently manually managed. Program Lead to engage with internal tool owners and support the customization process (defining specific requirements, understanding existing modules, perform testing, etc). Creation of a scenario library: Provide guidance/experience to facilitate the implementation of scenario testing across a business process.
Stakeholder Engagement:
1. Facilitate workshops and meetings with stakeholders to gather requirements, identify gaps, and develop solutions.
Training and Awareness:
1. Develop and deliver training and awareness programs to educate employees about DORA requirements and their responsibilities.
2. Support internal staff with the adoption of JIRA as a program management tool into BAU.
Regulatory Compliance:
1. Lead and manage the organisation's DORA implementation project, ensuring timely and effective compliance with all requirements across France, Italy, and Spain.
2. Serve as the primary subject matter expert on DORA, providing guidance and support to stakeholders across the organization.
3. Maintain the detailed project plan (JIRA), track progress, and manage risks and issues related to DORA implementation, owning the program governance process.
4. Own the reporting of DORA implementation progress to senior management and relevant governance forums.
5. Develop and maintain DORA related policies and standards.
6. Work with the business to ensure DORA is embedded in relevant new business processes and systems.
7. Facilitate roll out of IT risk frameworks and regulatory compliance (specifically DORA).
8. Support Critical and Important Function (CIF) framework definition and embedding.
9. Support CIF resilience assessment in terms of infrastructure, action planning, and remediation.
10. Ensure DORA controls are designed and operating effectively.
11. Engage with internal and external stakeholders, including senior management, regulators, and third-party providers, to ensure DORA implementation objectives are well understood and executed.
12. Stay up-to-date on DORA regulations and guidance, and ensure that FCE’s implementation efforts are aligned with the latest requirements.
13. Manage communication with regulatory bodies regarding DORA implementation.
#J-18808-Ljbffr