Business Analyst DORA

About the Team

Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to #BeYourselfAtWork.

Capco ICT Risk is a multi-faceted team focused on helping leading organizations across the Financial Services industry manage technology, cyber and regulatory risks. We support our clients in translating complex risk and regulatory requirements into practical business solutions, processes and controls.

With the growing importance of Digital Operational Resilience Act (DORA), our team works closely with financial institutions to strengthen their digital operational resilience and ensure that regulatory requirements are effectively embedded into their business and technology environments.

About the Job

As a Business Analyst within our ICT Risk team, you will be part of consulting engagements focused on risk, regulation, business processes and technology.

You will work closely with business, risk, compliance and technology stakeholders to understand requirements, analyze processes, identify risks and translate regulatory expectations into clear and actionable business requirements.

A key part of the role will be supporting clients with DORA implementation and compliance, including translating DORA requirements into processes, controls, governance and remediation initiatives.

You will work alongside experienced consultants and industry leaders, gaining exposure to complex transformation and regulatory projects within the Financial Services sector.

What You’ll Get to Do

• Analyze business processes, systems and services to identify risks, dependencies and improvement opportunities

• Translate business, risk and regulatory requirements into clear business and functional requirements

• Support clients in understanding and implementing DORA requirements across relevant business and technology processes

• Perform gap assessments and impact analyses against DORA, NIS2 and other relevant regulatory requirements

• Support the design and implementation of processes, controls, policies and governance frameworks

• Work with stakeholders across business, risk, compliance, security and technology to gather and validate requirements

• Facilitate workshops, document outcomes and translate complex topics into clear business language

• Analyze and document risks related to areas such as ICT risk, operational resilience, third-party risk, data security and access management

• Support remediation initiatives and help define practical solutions and implementation roadmaps

• Independently manage workstreams and contribute to projects of varying sizes

• Prepare high-quality client deliverables, including business requirements, process documentation, risk assessments, reports and PowerPoint presentations

What You’ll Bring with You

• 5+ years of experience as a Business Analyst, IT Business Analyst, Risk Consultant, GRC Consultant or in a similar role

• Demonstrable experience with DORA, preferably within the Financial Services industry

• preferable experience on IAM/PAM, System Hardening and IT Security Data Protection

• Strong experience in requirements gathering, business process analysis, gap analysis and stakeholder management

• Ability to translate regulatory and risk requirements into practical business processes, controls and requirements

• Good understanding of ICT risk, operational resilience and regulatory change

• Knowledge of security and risk frameworks such as ISO 27001/27002, NIST or CSA

• Experience in one or more areas such as ICT risk management, operational resilience, third-party risk, incident management, business continuity, data security or IAM

• Strong analytical and problem-solving skills

• Excellent communication skills and the ability to translate technical, regulatory and risk terminology into clear business language

• Experience working in project environments and independently managing workstreams

• Strong skills in MS Excel and PowerPoint

• Good knowledge of French OR Dutch (verbally and written) AND English

• A bachelor’s or master’s degree in business, economics, information systems, cybersecurity, risk management or a related field

• Relevant certifications such as CISA, CRISC, CISSP or ISO 27001 are considered a plus

Why Capco?

A career at Capco is a chance to help reshape the competitive landscape in financial services. We launch new banks, transform existing ones, and help our clients navigate complex regulatory, business and technology change.

As consultants, we work across the full transformation lifecycle, from business design and strategy through to technology implementation. You will have the opportunity to work directly with clients, develop your expertise and contribute to projects that have a real impact on financial institutions.

Capco is a young and growing firm. We maintain an entrepreneurial spirit and growth mindset, with minimal bureaucracy and no internal silos that get in the way of your career opportunities. We offer the opportunity to learn rapidly, take on challenging projects and grow quickly.

We take pride in our creative, collaborative, diverse and inclusive culture, where everyone can #BYAW.

We offer a competitive salary package with benefits such as meal vouchers, insurances, car or mobility budget, phone and bonus.

Ready to Take the Next Step?

Are you an experienced Business Analyst with DORA experience who enjoys connecting business, risk, compliance and technology?

Do you want to help leading financial institutions translate DORA and other regulatory requirements into practical business solutions?

Then we would love to hear from you.

Join Capco and help our clients strengthen their digital operational resilience and navigate the evolving regulatory landscape.