Third Party Risk Management Expert (Dora)

Short company description

Euro-Testing Software Solutions is involved in software consulting, having 20+ years of experience on the market in Romania and abroad, through specific IT solutions and services offered in the following areas:

• Software Testing (manual testing, testing automation, performance testing, outsourcing, training and certification, etc.)

• Cyber ​​Security

• DevOps/DevSecOps

• Implementation and Customization of Atlassian & OpenText products (MicroFocus) and other niche products/solutions

• AI based Decision Intelligence solutions.

Requirements

• University degree
• Experience of at least 3 years in 3rd party Risk Management / IT Risk Management / IT Audit (internal or external)
• Strong understanding of DORA regulatory requirements
• Good knowledge of NBR legislation, EBA / ECB guidelines on ICT and security risk management
• Experience in conducting gap / risk assessments
• Ability to keep the deadlines and to deliver good results under pressure
• Analytical skills, able to work independently or in a team, as required by the tasks assigned
• Strong communication skills, both written and verbal for interaction with technical and non-technical stakeholders
• Ability to plan, organize and prioritize the activity
• English language – advanced level.
• Highest standard of ethics and integrity.

Responsibilities

• Coordinate the risk assessment (RA) activities for 3rd party providers, in line with DORA requirements: liaising with internal IT team, business owners and external providers, lead the assessment process and the rating, and in some cases perform risk assessments based on audit reports, certifications, known incidents or events.
• Offer guidance to business and IT owners through risk assessment process for 3rd party providers.
• Collect from the 3rd party providers the necessary info and documents for the RA process.
• Be updated with the latest DORA regulatory requirements and translate the RA related requirements into actions.
• Perform reporting for risk assessment activities.
• Other DORA related activities, as requested.