Senior DORA Regulatory Compliance Consultant

Mission Overview:

Join Keystone Solutions as a Senior DORA Regulatory Compliance Consultant, where you will work on-site at a client location, providing independent advisory reviews of regulatory compliance. This consultancy mission involves assessing compliance positions related to the Digital Operational Resilience Act (DORA) for our client, ensuring their approach meets regulatory expectations.

Key Responsibilities:

• DORA Compliance Assessment:
  • Review the client's proposed DORA compliance positions across selected domains.
  • Assess the reasonableness and defensibility of compliance interpretations from a supervisory perspective.
  • Evaluate the application of the proportionality principle within the selected DORA domains.
  • Review alignment with DORA requirements, RTS/ITS guidance, and supervisory expectations.
• Regulatory Response Review:
  • Review the structure, logic, and consistency of the proposed response to the National Bank of Belgium.
  • Challenge key compliance assertions and assumptions.
  • Identify potential regulatory gaps, weaknesses, or inconsistencies.
  • Assess the overall regulatory defensibility of the proposed positions.
• Advisory & Recommendations:
  • Provide independent professional observations on compliance positions.
  • Recommend improvements to strengthen the regulatory response.
  • Propose enhancements to governance, ICT risk management, and compliance documentation where relevant.
  • Prepare a concise advisory memorandum summarizing findings and recommendations.

Required Experience:

• Strong knowledge of DORA (Digital Operational Resilience Act).
• Experience with ICT risk management frameworks and financial sector regulations.
• Experience performing regulatory assessments, gap analyses, or second-line reviews.
• Knowledge of proportionality principles within European financial regulations.
• Experience interacting with financial regulators or supporting regulatory inspections.
• Understanding of Third-Party Risk Management (TPRM), ICT Governance, Operational Resilience, and Information Security frameworks.

Key

Skills:

• Regulatory Compliance & Risk Management
• DORA & ICT Governance
• Supervisory Review & Challenge
• Regulatory Response Assessment
• Stakeholder Management
• Advisory Reporting
• Gap Analysis & Compliance Assessment
• Financial Services Regulatory Environment

Deliverables:

• Proportionality assessment across selected DORA domains.
• High-level review of the client's proposed NBB response.
• Advisory memorandum with observations and recommendations.
• Executive management presentation (if required).

Duration: As soon as possible - 31/07/2026 One week (part time 1/5)

Skills required:

• Risk Management - Level: Expert - Most recent:
  Any time

Language requirements:

• Dutch or French
• Level Nice to have
• English
• Level Professional working proficiency