IT Risk & Control Framework Consultant (Relocation to Spain)

Job Description

• Managing technology and cybersecurity risks from a governance and control framework perspective.
• Participating in technology risk assessment processes (RCSA, risk assessments, gap analysis).
• Mapping Risks – Controls – KPIs/KRIs, ensuring traceability and consistency of the control framework.
• Analyzing audit findings (internal and/or external) and defining structured remediation plans.
• Implementing and monitoring regulatory requirements, especially in the areas of:
  • DORA
  • Operational Resilience
  • Business Continuity
• Third Party Risk Management (TPRM):
  • Third‑party controls
  • Outsourcing
• Evaluation and improvement of policies, procedures, and technology standards.
• Preparation of:
  • Procedures and formal documentation
  • Dash...