Jobs › Italy - Milan › DORA Governance & TPRM Specialist
DORA Governance & TPRM Specialist
Capco is hiring for the job of DORA Governance & TPRM Specialist, Italy - Milan (On-site). This is a Governance job in the governance, risk, and compliance field. Review the full details below and apply directly with Capco.
Joining Capco means joining an organization that is committed to an inclusive working environment where you’re encouraged to #BeYourselfAtWork. We celebrate individuality and recognize that diversity and inclusion, in all forms, is critical to success. It’s important to us that we recruit and develop as diverse a range of talent as we can, and we believe that everyone brings something different to the table – so we’d love to know what makes you different. Such differences may mean we need to make changes to our process to allow you the best possible platform to succeed, and we are happy to cater to any reasonable adjustments you may require. You will find the section to let us know of these at the bottom of your application form or you can mention it directly to your recruiter at any stage and they will be happy to help.
About Capco
Capco is a global technology and business consultancy, focused on the financial services sector. We are growing at fast pace in our Italian office, the opportunity for growth is large, accessible, and immediate. We are passionate about helping our clients succeed in an ever-changing industry. Capco is going through a significant growth journey, now is a very good time to join us as we expand our consulting team in Italy.
Role Description
As part of the consulting team, the DORA Governance and TPRM Specialist will:
Support the definition, implementation, and evolution of the Digital Operational Resilience framework in line with DORA, including governance, roles, responsibilities, and reporting
Monitor and manage ICT and third-party risks, with a focus on service providers and outsourcing arrangements
Contribute to the ICT Third-Party Risk Management (TPRM) framework, including risk assessment, due diligence, and ongoing supplier monitoring
Support second line of defense activities within the ERM framework (e.g., KRI, RAF, controls), focusing on ICT and security risks
Maintain and update the Register of Information (RoI), ensuring data quality and completeness of ICT services and providers
Support the definition and maintenance of policies and procedures related to ICT risk, digital resilience, and third-party management
Contribute to the ICT Risk Appetite Framework, including indicators, thresholds, and escalation mechanisms
Support ICT incident management oversight and remediation processes
Prepare reporting and dashboards to communicate ICT and third-party risk exposure to senior stakeholders
Collaborate with cross-functional teams to ensure alignment on digital resilience initiatives
Skills and Experience
To qualify for the role you must have:
Bachelor’s degree in economics, engineering, law or related fields
3–6 years of experience in ICT Governance / Risk and Compliance / Operational Resilience / Third Party Risk Management, and consulting
Good knowledge of Digital Operational Resilience Act (DORA) and ICT risk management frameworks
Understanding of ICT outsourcing and third-party risk management processes
Experience in drafting policies, procedures and regulatory documentation
Strong analytical skills and excellent communication skills
Ability to interact with multiple stakeholders across different functions
Nice to have:
Professional certifications (e.g. CRISC, CISA, CISM, ISO 27001, ISO 22301)
Experience in financial services or insurance sector
Why join Capco?
You will work on engaging projects with some of the largest banks in the world, on projects that will transform the financial services industry.
We offer a competitive, people-first benefits package designed to support every aspect of your life:
Comprehensive health benefit coverage
Meal Vouchers
Welfare allowance
Access to internal and Tier 1 learning platforms
In Capco you will find:
A work culture focused on innovation and building lasting value for our clients and employees
Ongoing learning opportunities to help you acquire new skills or deepen existing expertise
A flat, non-hierarchical structure that will enable you to work with senior partners and directly with clients
A diverse, inclusive, meritocratic culture
Pay Transparency
Capco is committed to providing fair and equitable compensation to our people. Our compensation policies are designed to allow our people to progress through our defined salary range over time as they progress in their role.
The minimum gross annual base salary for this position is from €29.000. The final offer could be higher to reflect the candidate’s experience, skills, and overall fit for the role. Additionally, this position may also be eligible to receive a discretionary/variable bonus payment.
Location
Piazza Gae Aulenti 1, Milan (Garibaldi FS/MM Garibaldi)
span rgb(26, 26, 26); # -Hybrid
span rgb(26, 26, 26); # -AD1
Certifications this role asks for
Studying for one of these? Try the free CISA practice questions or the free CISM practice questions in our academy. No signup, no cost.
Location and market context
This job is based in Italy - Milan on-site. Local candidates benefit from being close to Capco's teams and regional hiring market. Confirm the exact in-office expectation and any relocation support with the employer.
About governance jobs
Governance jobs design the structures, policies, and oversight that keep complex programs accountable, coordinating across legal, risk, compliance, and technology. Jobs like this one are typically evaluated against frameworks such as governance frameworks, policy standards, and oversight and reporting practices.
How to position yourself for this governance job
Strong candidates emphasize policy and standard-setting, committee and stakeholder coordination, oversight reporting, and translating strategy into durable operating structures. In your resume and outreach, tie your experience to how Capco would apply governance frameworks, policy standards, and oversight and reporting practices, and lead with concrete outcomes rather than duties.
Similar GRC jobs
- AML Strategy and Governance Senior Manager · FanDuel · Toronto, Ontario, Canada
- Staff Identity Governance and Access Engineer · Okta · Bellevue, Washington
- Vendor Operations & Governance Specialist · Twilio · Remote
- Security Operations Governance & Modernization, AVP · Deutsche Bank · 2 Locations
- IS Control Governance Specialist · Deutsche Bank · Mumbai Nirlon Knowledge Pk B1
- IAM Governance Business Analyst · Capco · Poland - Warsaw
- Post-Award Governance Specialist · Cloudflare · Hybrid
- Senior Consultant/Manager - Sécurité Financière & Conformité (LCB-FT, KYC, AMLR) H/F · Capco · Paris, France
More jobs at Capco
- Enterprise Risk Manager · Capco · Edinburgh, UK
- Business Analyst-Third Party Risk Management · Capco · Bengaluru, India
- Compliance Associate AML/KYC · Capco · Orlando
- Data Governance Analyst | Banking · Capco · Singapore
- Data Governance Specialist | Banking · Capco · Singapore
- ICT Risk Analyst · Capco · Italy - Milan
More GRC jobs in Italy - Milan
- Senior Risk Analyst · AlphaSense · India · Remote
- Senior Compliance Specialist · Singlestore · India
- Governance, Risk, and Compliance Expert, GTM, Pre-Sales · Vanta · . · Remote
- Senior Risk & Governance Engineer · AlphaSense · India
- Compliance Engineering Lead · Socket · United States
- Third-Party Risk Management Analyst · Samsara · Remote
Hiring for Governance?
Reach candidates who are already searching for this role, not a general audience. Your posting appears on this page, in the job alerts, and across the GRC Careers network.
Post a job Pricing from $99 · About GRC Careers · Hiring toolkit
Want to be next in a job like this?
Jobs like DORA Governance & TPRM Specialist in Italy - Milan open regularly. Be first to know, privately. No current employer ever sees you looking.
Employer, or see something wrong with this posting? Report this posting and we will review it promptly.