Business Analyst DORA / Third Party IT Risk - Permanent

General Responsibilities

• Gather, analyze, and document requirements related to IT suppliers and contracts

• Support the implementation of third-party technology risk management processes

• Collaborate with SMEs, IT teams, and business stakeholders

• Analyze and improve existing processes with local IT management

• Translate requirements into contractual security clauses

• Participate in quality reviews of existing and new IT supplier contracts

• Act as a liaison between:

  • IT Risk Officer

  • CIO

  • IT & Security teams

Data & Risk Responsibilities

• Assess risk levels of IT suppliers

• Identify and formalize business & IT requirements aligned with DORA

• Ensure proper registration of IT suppliers in tools (e.g., ServiceNow TPTRM, risk platforms)

• Maintain data quality and consistency

• Analyze and resolve data quality issues

• Support reporting and preparation for risk committees

• Review TPTRM outputs with stakeholders

• Proactively identify issues and propose solutions

• Monitor and prioritize third-party risk topics weekly