This role supports the implementation and ongoing assurance of DOR (Digital Operational Resilience) requirements within the first line of defense, planning and executing control testing activities across ICT risk, resilience, and third‑party risk domains.
Key Responsibilities
Plan and execute first‑line control testing aligned with regulatory requirements (ICT risk management, incident management, resilience, third‑party risk)
Assess design and operating effectiveness of key controls supporting regulatory compliance
Perform walkthroughs, evidence reviews, and sampling aligned with defined testing methodology
Ensure consistency and traceability of testing across controls, entities, and domains
Maintain structured documentation of test procedures, results, and conclusions
Identify and document control gaps, weaknesses, and non‑compliance against legal requirements
Translate technical findings into clear, concise business language with actionable recommendations
Produce high‑quality management reports, working papers, and summaries on control effectiveness and testing outcomes
Track remediation actions, validate closure, and support retesting activities
Support preparation for internal audit, external audit, and regulatory inspections
Coordinate timely and structured responses to audit and regulatory requests
Strengthen quality of control narratives and evidence to meet regulatory expectations
Contribute to lessons learned and continuous improvement post‑assessments
Coordinate testing plans, timelines, and dependencies across multiple stakeholders
Engage with technology, risk, compliance, and business teams to facilitate testing and remediation
Provide structured updates to governance forums on progress, risks, and findings
Escalate issues proactively with clear recommendations and mitigation options
Enhance control testing methodology, templates, and quality standards aligned with DOR
Promote best practices in evidence management, traceability, and documentation
Identify opportunities to improve efficiency, consistency, and automation in testing and reporting
Qualifications
University degree in IT/Engineering/Science
5–8 years of experience in technology risk, internal controls, audit, or compliance testing
Proven experience in control testing and audit readiness in regulated environments
Exposure to DORA (similar to Swift Oversight Law), operational resilience, ICT risk, or similar regulatory frameworks is highly desirable
Understanding of technology risk domains (ITGCs, resilience, security, outsourcing)
Excellent attention to detail and commitment to high‑quality deliverables
Ability to articulate technical findings into business‑oriented insights
Strong planning, coordination, and stakeholder engagement skills
High degree of ownership, autonomy, and accountability
Structured, analytical, and solution‑driven mindset
Experience with control repositories, evidence management, and reporting tools is an asset
Benefits
Freedom to be your authentic self and bring your full self to the team
Diverse and inclusive environment where everyone’s voice counts and you can reach your full potential
Commitment to an inclusive and accessible recruitment process
Reasonable accommodations for accessibility upon request (contact )
We are committed to an inclusive and accessible recruitment process. If you require a reasonable accommodation related to accessibility during your application or interview, please contact
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.