Location: Frankfurt, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Type: Permanent 

Shape the digital and operational resilience of financial institutions with us - from DORA and ICT risk management to Third Party Risk and Operational Resilience. 

The Role 

As a (Senior) Consultant - Operational & Cyber Resilience, you support our clients in the financial industry in implementing regulatory requirements, in particular around the Digital Operational Resilience Act (DORA) and the relevant EBA Guidelines. You work at the interface of regulation, ICT risk management, Operational Resilience and IT Governance and accompany our clients from analysing existing structures through to sustainable implementation. 

Among other things, you deal with ICT control frameworks, Incident Management, Third Party Risk Management and outsourcing management. You also use approved AI tools, automation and AI-enabled workflows where they meaningfully improve analysis, quality and productivity - always with due regard to human judgement, appropriate controls and Responsible AI guidelines. 

Your Tasks 

• Advise financial institutions on the implementation and further development of DORA requirements and on building sustainable Digital Operational Resilience. 
• Analyse and optimise ICT/IT risk management, IT Governance and ICT/IT control frameworks and support the development of suitable governance and control structures. 
• Support Third Party Risk Management, ICT Third Party Risk, IT Supplier Risk and outsourcing management - from risk analyses through to the implementation of robust control processes. 
• Accompany our clients in ICT Incident Management and Major ICT Incidents, including the further development of relevant processes, controls and regulatory requirements. 
• Use approved AI and automation solutions to make analysis, documentation and control activities more efficient, for example, and ensure human-in-the-loop review, traceable results and required escalation paths. 

Your Profile 

• Experience or solid knowledge in DORA, ICT/IT risk management, Operational Resilience or Operational Risk, ideally in the financial services environment. 
• Knowledge of at least one further relevant subject area such as IT Governance, ICT Controls, Incident Management, Third Party Risk Management or outsourcing management. 
• Ability to analyse regulatory requirements, present them clearly and translate them together with different stakeholders into practical governance, risk and control measures. 
• Experience in the role of an (internal or external) management consultant with a track record of successful contributions to project outcomes. 
• A structured and analytical way of working, and enjoyment of tackling complex regulatory and technological questions together with clients. 
• Curiosity about AI-enabled Ways of Working and the willingness to use approved AI tools responsibly, including critical review of results and observance of relevant guardrails, review and escalation processes. 
• Fluent German and English.

Nice to have 

• Experience in designing or further developing ICT/IT control frameworks and corresponding governance models. 
• Practical experience with DORA implementation or transformation programmes at banks, insurers or other financial institutions. 
• Knowledge of Third Party Risk Management and outsourcing management, particularly in the context of regulatory requirements for ICT third-party service providers. 
• Experience with Major ICT Incident Management, Operational Resilience or designing corresponding risk and control processes. 
• Experience in using AI, GenAI or automation responsibly for analysis, documentation or control processes.

Why Capco?  

• Work on impactful transformation and regulatory projects for leading financial institutions.
• Become part of a collaborative, flat and entrepreneurial consulting culture.
• Take advantage of continuous learning, training and certification opportunities.
• Work with experienced colleagues at the interface of financial services, regulation, risk and technology.
• Actively shape the future of Digital Operational Resilience and regulatory transformation.

We offer a competitive benefits package geared towards our employees, which supports your professional and personal development.

Benefits

• Flexible working models and hybrid working possible depending on project assignment.
• A comprehensive onboarding process as well as your personal coach and buddy; continuous feedback and training opportunities, including through internal training and Udemy Business.
• Bike leasing programmes and a Capco Benefits Card with a monthly credit of 44 EUR.
• Regular health checks, mental health courses and support through the PME family service for various life situations.
• Permanent employment contract, great company events and after-work gatherings, as well as a dynamic and international environment with flat hierarchies and varied opportunities to bring your talents to the table.

Inclusion at Capco

We are committed to an accessible and inclusive recruiting process. Should you need support or adjustments at any stage of the application process, please feel free to get in touch with us - we will be glad to help.

We welcome applications from people with different backgrounds and perspectives. At Capco we value the individual contributions of everyone. Our #BeYourselfAtWork culture stands for diversity, equal opportunities and inclusion and shapes how we work with our clients and with each other.

*What matters is that we fit together #beyourselfatwork.