Cyber Security DORA Control Officer

Decskill, founded in 2014 as an IT Consulting Company, places paramount importance on its greatest asset: its people. Our main mission is to deliver value through knowledge and talent, and we achieve this by fostering a culture of excellence and investing in the development and well‑being of our people. With over 600 dedicated professionals and offices in Lisbon, Porto, Madrid, and Luxembourg, Decskill operates across three core areas:

• DECSKILL TALENT: We believe that our people are key to our success. Through Decskill Talent, we empower our team to embrace the digital transformation challenges of our clients. We collaborate with clients to drive innovation, ensuring project success and business growth.
• DECSKILL BOOST: Equipping our team with the latest tools and methodologies, we optimize Time‑to‑Market and deliver innovative solutions exceeding client expectations.
• DECSKILL CONNECT: Our team collaborates closely with clients to implement and manage IT infrastructures that generate long‑term value.

At Decskill, we believe that by nurturing and empowering our people to confront the challenges of digital transformation, we create value not only for our clients but also for our entire ecosystem, fostering a digital community dedicated to growth and progress.

Cyber Security DORA Control Officer

Responsibilities

• Support DORA maturity assessment: collate evidence of DORA maturity by collaborating with IT teams and audit evidence provided by group teams, identifying remaining gaps.
• Coordinate with group ITO IT Risk team and sub‑groups to obtain the formal approval of DORA compliance and increase group maturity.
• Assist in preparing reports for regulators: analyse and help structure group answers to regulators or audits inquiring about DORA maturity.
• Support committees’ preparation and animation with various stakeholders at different management levels, preparing communication on projects with relevant stakeholders (internal, external).
• Monitor activities contributing to DORA, identify main contributors and organize regular compliance reporting. Special focus on projects that are not part of the cyber‑governance such as management and security of back‑ups or Third Party Risk Management (TPRM).
• Document DORA maturity increase: plans, reports, trend analysis and back‑to‑green definition with SMEs when necessary.
• Assist project resource management: help formalise and monitor budget (budget, FTE) for DORA initiatives.

Requirements

• Knowledge of regulatory standards and ability to translate them into internal policies.
• General knowledge of IT and cybersecurity regulators framework.
• Ability to verify operations and ensure procedures are followed.
• General knowledge in cybersecurity risks, frameworks and requirements.
• Ability to challenge, approve and decide on new activities and projects.
• Global knowledge of IT, its major processes and assets & solutions.
• Ability to understand business needs and manage business/IT relationships.
• Familiarity with ISO 27001, NIST, Digital Operational Resilience Act (DORA) and related tools.
• Proficiency in Microsoft Office (Excel, Macro, Power
  Point).
• Good level of English.

If you’re interested in this job, please send your CV to cesaltina. abreu@decskill.com with reference “CA/DORA”.

Decskill is committed to equality and non‑discrimination with all our talents. We recruit and promote talent, based on diversity and inclusion, regardless of age, gender, ethnicity, race, nationality or any other form of discrimination incompatible with the dignity of the human being.