28 дней назад
ICT Governance & Resilience Manager (DORA)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
ICT Governance & Resilience Manager (DORA): Owning Viber’s DORA governance framework, ICT inventories, audit evidence, incident reporting, and operational resilience testing with an accent on regulatory compliance, third-party oversight, and business continuity. Focus on coordinating audits and inspections, driving remediation across stakeholders, and preparing Board-level reporting on operational resilience and ICT risk.
Location: St. Julian's, Malta
Company
is a global communications platform serving hundreds of millions of users with safe, reliable, and compliant digital experiences.
What you will do
- Own and maintain the DORA governance framework, policies, ICT inventories, PCI-DSS requirements, TPSP register, dependency mapping, and BCM documentation.
- Maintain inspection-ready evidence repositories and coordinate internal and external audits, regulatory inspections, notifications, reporting, and evidence requests.
- Coordinate incident reporting, post-incident reviews, BIA reviews, BCP testing, operational resilience testing, recovery testing, and tabletop exercises.
- Manage third-party risk governance, TPSP oversight reviews, KRIs, KPIs, and remediation tracking.
- Chair monthly operational resilience meetings and follow up with stakeholders across functions and geographies.
- Prepare quarterly Board reporting packs on operational resilience and ICT risk.
Requirements
- At least 5 years of experience in operational resilience, ICT risk management, business continuity, or a related governance function.
- Experience managing or coordinating a DORA, ISO 22301, or equivalent regulatory compliance program.
- Hands-on experience with governance frameworks, risk registers, ICT inventories, audits, regulatory inspections, and evidence requests in a regulated environment.
- Understanding of third-party/TPSP oversight and contract risk management.
- Experience producing Board-level reporting packs and executive risk communications.
- Fluent written and spoken English required.
Nice to have
- Experience in EU financial services or fintech regulatory environments, especially DORA.
- Familiarity with the Maltese regulatory landscape, MFSA, EU regulatory reporting, and card schemes.
- Experience coordinating BCP or resilience testing exercises.
- PMP, PRINCE2, CRISC, CISM, or equivalent certification.
- Experience with payment institutions, e-money issuers, or regulated messaging and communications platforms.
Culture & Benefits
- Work within a global team focused on innovation, accountability, and excellence.
- Contribute to safe, reliable, and compliant digital experiences for millions of users.
- Collaborate with stakeholders across functions and geographies.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →