IT Operational Resilience Manager

Working closely with the Chief Information Officer and IT Operational Resilience Manager, you will apply your DORA and technology expertise to translate regulatory

requirements into practical processes, controls and evidence. Act as a DORA subject matter expert, supporting the implementation and continuous improvement of MIPSL's DORA compliance framework. Translate DORA

requirements into practical technology processes, controls, procedures and evidence. Perform and support DORA gap assessments, control assessments and readiness reviews, coordinating remediation through to closure. Support ICT risk management, incident management, digital operational resilience testing, and ICT third-party risk-management activities. Maintain DORA policies, procedures, control documentation and evidence in partnership with accountable stakeholders. Support regulatory reporting, audits, assurance activities and Central Bank of Ireland information requests. Monitor regulatory developments and help embed evolving

requirements into MIPSL's technology environment. Operate IT service and security controls Operate and monitor controls across incident, problem, change, configuration, asset and service management. Support identity, vulnerability and asset management Coordinate identity and access controls, including provisioning, removal, privileged access and periodic access reviews. Support mapping between technology assets, business processes, data, service providers and critical dependencies. Support technology controls for data Support implementation of technology controls for data access, protection, secure storage, retention and secure deletion. Support data classification and identification of critical business data. Support outsourced technology oversight and assurance Support technology due diligence, ICT third-party risk assessments, service reviews and assurance activities. Support internal and external audit, regulatory reviews and technology-control assessments. Bachelor's Degree in Computer Science, Information Technology, Engineering, Cybersecurity, Risk Management, Business, or a related field AND experience in IT operations, cybersecurity, technology risk, IT service management or a related technology-control role, OR equivalent experience. Strong knowledge of the EU Digital Operational Resilience Act (DORA), including ICT risk management, ICT incident management, resilience testing and ICT third-party risk management. Experience translating regulatory or risk

requirements into practical technology processes, controls and evidence. Experience with IT operations and technology controls, including IT service management, identity and access management, vulnerability management, security operations or technology asset management. Experience supporting regulatory compliance, control assessments, audit, assurance or remediation activities. Strong stakeholder-management and communication skills, with the ability to work effectively across business, technology, risk and compliance teams. Experience implementing or operating DORA

requirements within financial services, payments, banking or fintech. Experience working within a regulated entity that relies on group or third-party technology services. Knowledge of Central Bank of Ireland and European Banking Authority

requirements relating to ICT risk, operational resilience and outsourcing. Knowledge of technology and control frameworks such as ITIL, COBIT, ISO 27001, ISO 22301 or NIST. Experience supporting regulatory inspections, audits or technology-control assurance. Relevant certification in information security, technology risk, IT service management, audit, governance or operational resilience. Ability to work independently, apply regulatory

requirements pragmatically and drive issues through to resolution in a complex technology environment.