C

Capco

Advises banks, insurers and energy companies

Business Analyst DORA

Risk, Regulatory & Legal AdvisoryConfirmed live in the last 24 hours
Full-timeBrussels, BelgiumIn-person

About the Job

Requirements

  • At least 5 years of experience as a Business Analyst, IT Business Analyst, Risk Consultant, GRC Consultant, or in a similar role.
  • Demonstrable experience with DORA; experience in the financial services industry is preferred.
  • Experience in requirements gathering, business process analysis, gap analysis, and stakeholder management.
  • Ability to translate regulatory and risk requirements into practical business processes, controls, and requirements.
  • Good understanding of ICT risk, operational resilience, and regulatory change.
  • Knowledge of security and risk frameworks such as ISO 27001/27002, NIST, or CSA.
  • Experience in one or more areas such as ICT risk management, operational resilience, third-party risk, incident management, business continuity, data security, or identity and access management.
  • Good written and verbal knowledge of either French or Dutch, and English.
  • A bachelor’s or master’s degree in business, economics, information systems, cybersecurity, risk management, or a related field.

Responsibilities

  • Analyze business processes, systems, and services to identify risks, dependencies, and improvement opportunities.
  • Translate business, risk, and regulatory requirements into clear business and functional requirements.
  • Support clients in understanding and implementing DORA requirements across relevant business and technology processes.
  • Perform gap assessments and impact analyses against DORA, NIS2, and other relevant regulatory requirements.
  • Support the design and implementation of processes, controls, policies, and governance frameworks.
  • Gather and validate requirements with stakeholders across business, risk, compliance, security, and technology.
  • Facilitate workshops, document outcomes, and translate complex topics into clear business language.
  • Analyze and document risks related to ICT risk, operational resilience, third-party risk, data security, and access management.
  • Support remediation initiatives and help define practical solutions and implementation roadmaps.
  • Independently manage workstreams and contribute to projects of varying sizes.
  • Prepare client deliverables, including business requirements, process documentation, risk assessments, reports, and PowerPoint presentations.

Desired Qualifications

  • Experience with identity and access management, privileged access management, system hardening, and IT security data protection.
  • Relevant certifications such as CISA, CRISC, CISSP, or ISO 27001.

About the Company

Capco

Advises banks, insurers and energy companies

Capco advises banks, payment companies, insurers, asset managers, and energy firms on strategy, regulation, and technology, and unlike generalist consultancies it sticks to finance and energy. In 2021, Capco became the largest acquisition in the history of Indian IT services company Wipro, which bought it to expand its consulting for banks. Clients hire Capco teams to redesign operations, comply with regulations, modernize payment and trading systems, and adopt AI under strict risk controls, while its engineers build the software behind those changes. Clients pay for consultants' time or a fixed project price, and Capco staff often work on site with client teams. Capco was founded in Belgium in 1998 and is based in London.

Company size
5,001-10,000
Company stage
Acquired
Total funding
$80M
Headquarters
London, United Kingdom
Founded
1998

Recently Posted Jobs

Explore more opportunities at Capco

See more jobs