Third Party Risk Specialist ICT DORA

Lunar Group A/S is the Danish parent company of Lunar’s active Nordic digital-banking and financial-services businesses.

Series D0 current maintainers0 active leads
Aarhus, Denmark
About Lunar Group A/S

Lunar Group A/S is headquartered in Aarhus and is the parent company of Lunar Bank A/S, Lunar Block A/S, Moonrise Banking Services A/S, and Lunar Journey AB. Its group businesses provide regulated digital banking, business banking, Nordic banking-services/payment connectivity, and crypto-asset trading across Denmark, Sweden, and Norway.

View jobs by Lunar Group A/S

Skills

Candidate Availability

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will own ICT third-party risk before and after contracts are signed. You will conduct vendor classification, due diligence, and risk assessments; define contractual requirements; monitor critical vendors; maintain the DORA register and exit plans; and report risk matters to relevant stakeholders and regulators.

Requirements

  • Hands-on experience with ICT third-party risk under DORA in a regulated financial institution or as an adviser
  • Experience conducting risk assessments and due diligence independently
  • Experience managing ICT vendors after contract signature, including SLAs, reviews, reassessments, and exit planning
  • Ability to assess ICT contracts for DORA Article 30 terms, audit rights, exit rights, and subcontracting provisions
  • Fluent English
  • Right to work in Denmark
  • Ability to work from the Aarhus or Copenhagen office

Responsibilities

  • Run classification, due diligence, and risk assessments for ICT vendors
  • Work with Legal to define contractual requirements, including DORA Article 30 terms, SLAs, audit rights, and exit rights
  • Track SLA performance, conduct vendor reviews, follow ICT incidents, and review assurance reports
  • Own the DORA register of information and ICT concentration-risk input
  • Ensure critical services have workable exit strategies
  • Work with procurement and report to management, second-line risk, internal audit, and the Danish FSA

Benefits

  • State-of-the-art equipment, including a computer, monitor, mouse, and keyboard
  • Pension
  • Health insurance
  • Enhanced parental leave