Information Technology Governance Consultant

About our team

BCR is the place where you learn, grow, and contribute to shaping the future of banking. We are recognized as a school of excellence in banking, a top employer in the banking sector, and a team open to learning, where every colleague feels noticed and valued.

We are an organization that values people and supports them in having a life that brings fulfillment, security, and balance.

Your role

As an IT Compliance & IT Risk Management Expert, you will play a key role to:

• perform IT risk assessments and tasks related to DORA implementation;
• monitor and report the implementation status of: IT audit & IT operational risk measures and IT risk scenarios;
• act as SPOC and centralize information for external audits related to IT area;
• monitor, consolidate and reports on the Business Impact Analysis for solutions exercise.

How you will contribute

• Perform review and qualified assessment of information regarding the IT Risk self-assessments;
• Use your expertise to engage in and enhance the reporting and monitoring of IT compliance related matters;
• Perform monitoring and reporting activities for the implementation status of: IT audit and IT operational risk measures;
• Act as SPOC, perform qualified assessment and consolidate the requested information for external audits in IT area;
• Ensure collection, support, consolidation and reporting on the “Business Impact Analysis for IT solutions” exercise;
• Use your professional expertise in raising awareness on the risks triggered by end-user developed applications;
• Foster strong relationship with business and risk functions within the Bank as well as with IT external auditors.

What will help you be successful

• 5+ years of experience in Information Technology, ideally in the banking & insurance area;
• 3+ years of experience in internal or external IT Audit and/or IT risk management;
• CRISC / CISA certification is an advantage;
• Profound knowledge of:
• BNR legislation on operational, IT and security risks;
• EBA / ECB guidelines on ICT and security risk management;
• DORA;
• IT Risk related frameworks and standards (e.g. COBIT, ISO/IEC);
• Experience in conducting IT risk assessments;
• Understanding of data privacy and business continuity concepts;
• Ability to keep the deadlines and to deliver good results under pressure;
• Analytical skills, able to function effectively when working independently or in a team, as required by the tasks assigned;
• Ability to plan, organize and prioritize the activity;
• Excellent communication skills;
• English language – advanced level;
• University degree: technical / economic field.

Sounds like you'd be a good fit? Well, check out what we provide for our passionate people

• Monthly budget for flexible benefits through the Benefit Online platform;
• Performance-based bonus;
• Banking facilities, benefits for private pension and discounts on insurance policies;
• Gifts for special occasions;
• Private medical services for you and your family;
• Hybrid and flexible work schedule;
• Up to 27 vacation days depending on your professional experience;
• Extra 7 days off per year if you have used up your vacation days;
• One day off for your birthday;
• Wellbeing, personal and professional development programs, and platforms that allow you to learn anytime, anywhere, and from any device;
• Subscription to Bookster.

To find out how BCR processes the personal data required in the recruitment process, please visit https://www.bcr.ro/ro/cariere/informare-candidati