Senior DORA Programme Manager - Third-Party Risk remainder remote Contract: Inside IR35 (Umbrella Company) Sector: Financial Services / Banking / Financial Market Infrastructure ABOUT THE OPPORTUNITY We are supporting a leading global financial services organisation seeking an experienced Senior DORA Programme Manager to lead procurement and supplier management regulatory remediation under the Digital Operational Resilience Act (DORA) and related regulatory frameworks. This is a high-profile delivery role covering ICT third-party risk management (TPRM), outsourcing governance, supplier contract remediation, procurement controls, operational resilience and regulatory compliance. You will coordinate Procurement, Legal, Risk, Operational Resilience, Technology and Business teams to ensure obligations are implemented, evidenced and embedded into business-as-usual operations. We are particularly interested in candidates who have personally led DORA or equivalent regulatory remediation programmes within major financial institutions. KEY RESPONSIBILITIES DORA Regulatory Remediation Lead procurement-related DORA workstreams, including ICT third-party contract uplift and supplier due diligence. Remediate the Register of Information (ROI), improving supplier data quality, classification and regulatory reporting readiness. Oversee supplier inventories, critical and important function (CIF) assessments, tiering and materiality reviews. Coordinate operational resilience requirements, regulatory evidence collection and audit preparation. Supplier Contract Remediation Lead remediation of supplier agreements to meet DORA requirements, including audit and regulatory access rights, subcontracting, material change notifications, data location and processing, exit assistance, termination rights, business continuity and incident management. Work with Legal, Procurement and suppliers to negotiate, track and complete contractual uplift activities. Register of Information (ROI) Coordinate collection, validation and reconciliation of supplier and internal data. Oversee supplier mapping, critical provider identification, data quality improvements and regulatory classification. Establish clear ownership, governance and processes for ongoing regulatory reporting. Subcontractor Governance Establish subcontractor declarations, supply chain visibility and mapping, and identification of material subcontractors. Assess concentration risk and implement KPI/KRI reporting, oversight controls and regulatory evidence management. Supplier Exit Planning Develop supplier exit strategies, plan inventories, gap assessments and remediation roadmaps. Track accountable owners, exit testing readiness and evidence of compliance. Ensure exit plans are maintained and owned by the relevant business functions. Programme Governance
Senior DORA Programme Manager - Third-Party Risk employer: Salt Search
Join a dynamic and innovative cyber security company that prioritises employee growth and development, offering a collaborative remote work environment with occasional office travel. As the Head of PMO, you'll enjoy the autonomy to shape project delivery processes while working closely with senior leadership and high-profile clients, ensuring meaningful contributions to critical infrastructure protection. With a strong focus on work-life balance and a culture that values initiative and creativity, this role presents an exceptional opportunity for those looking to make a significant impact in a fast-paced industry.
