Operational Resilience Specialist in Frankfurt am Main

Responsible for supporting and coordinating the Digital Operational Resilience agenda across EU locations, with a focus on DORA implementation, operational resilience governance, ICT incident reporting, resilience testing, crisis management, and related regulatory obligations.

Key Responsibilities

DORA Governance and Coverage:

• Ensure appropriate DORA coverage across all EU member states where the firm operates.
• Support alignment of local DORA activities with the global Operational Resilience Framework.
• Maintain relevant operational resilience policies, procedures, governance documentation, and reporting artefacts.
• Monitor EU technology and operational resilience regulatory developments relevant to the firm.

DORA Register of Information and ICT Service Oversight:

• Lead ongoing maintenance of the DORA Register of Information, including ICT service review, data quality checks, data normalisation, stakeholder coordination, and preparation of reporting packages.
• Maintain DORA function mapping and support review and attestation activities for ICT services within the Register of Information process.
• Coordinate regular working groups and stakeholder follow-ups required to keep DORA data complete, accurate, and submission ready.

ICT Incident Reporting and Regulatory Obligations:

• Support identification, assessment, classification, and reporting of ICT incidents in line with DORA requirements.
• Coordinate preparation of DORA incident reporting submissions where required, including input from relevant Technology and business stakeholders.
• Oversee Technology-owned BAU controls arising from DORA, including attestations, reporting obligations, employee training, and related evidence preparation.

Testing, Crisis Management, and Operational Resilience Execution:

• Plan, coordinate, and monitor execution of the DORA testing strategy and testing programme.
• Prepare, coordinate, and execute scenario testing, including stakeholder engagement and evidence capture.
• Coordinate Crisis Management activities, including maintenance of the Crisis Management Plan, execution of the Crisis Coordinator role during crisis events, crisis exercises, and staff awareness activities.
• Act as an operational resilience partner for business users and local stakeholders.

Skills and Experience

• Experience in operational resilience, technology/ICT risk, business continuity, crisis management, or related control functions within financial services.
• Strong understanding of DORA requirements, including ICT risk management, incident reporting, resilience testing, third-party risk oversight, and the Register of Information.
• Knowledge of EU financial services regulatory expectations relating to operational resilience, outsourcing, technology governance, and incident management.
• Ability to interpret regulatory requirements and translate them into practical controls, procedures, governance actions, and BAU processes.
• Strong governance, documentation, reporting, and control execution skills, including preparation of policies, procedures, attestations, management updates, and evidence packs.
• Experience managing data quality, stakeholder inputs, and reporting processes for ICT services, business functions, and third-party dependencies.
• Practical experience supporting incident management, crisis response, business continuity exercises, or operational resilience scenario testing.
• Excellent stakeholder management, organisational, analytical, and communication skills, with strong attention to detail and the ability to manage multiple priorities.
• Experience with GRC, risk management, workflow, incident management, or data management tools beneficial.
• Relevant professional certifications, such as CBCI, ISO 22301, CISA, CRISC, ITIL, or similar, would be advantageous.