Consultant DORA-Project

Für unseren Kunden wir suchen schnellstmöglich, zunächst bis 31.03.2025, einen Consultant mit folgenden Profilschwerpunkten:

Technical Skills:
- Familiarity with security concepts, including SIEM, SOC, cloud security, and penetration testing.
Project Management Skills:
- Strategic Planning: Ability to develop and implement ICT strategies, including CMDB concepts and third-party oversight roles.
- Business Continuity: Knowledge of business impact assessments, business continuity planning (BCP), and disaster recovery planning (DRP).
- Risk Management: Proficiency in identifying, assessing, and mitigating ICT risks, including regular updates to risk inventories.
- Testing and Validation: Capability to design and execute regular testing of systems and controls, including cyber-attack simulations.
- Resource Planning: Skills in resource allocation and capacity planning to ensure operational resilience.
Compliance and Regulatory Skills:
- DORA Compliance: Familiarity with the Digital Operational Resilience Act (DORA) and its requirements for ICT risk management and reporting.
- Audit and Control: Experience with audit planning, control testing, and ensuring auditor independence.
- Legal and Regulatory: Understanding of legal requirements related to ICT, including data protection and third-party service agreements.

Further:
- Must be capable of developing concepts (IT-security concepts, guidelines, procedures)
- Very good written and spoken English + German / intercultural understanding
- 1/3 home office / 2/3 on-site --> Köln