The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers.
Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion.
That’s why, at Apex Group, we will do more than simply ‘empower’ you. We will work to supercharge your unique skills and experience.
Take the lead and we’ll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities.
For our business, for clients, and for you
The DORA Implementation & Oversight Analyst the implementation, maintenance and continuous improvement of the DORA governance and control framework across the relevant Apex entities in scope.
The role operates across all European entities of the Apex Group subject to DORA, ensuring a consistent, pragmatic, and well-governed approach to ICT governance, ICT risk management, ICT third-party oversight, incident governance, resilience documentation, and regulatory evidence.
This role focuses on governance, stakeholder coordination, compliance monitoring, documentation management, and management reporting. The successful candidate will work closely with technology, risk, compliance, business, and support functions to help ensure that regulatory obligations, governance activities, and remediation actions are effectively tracked, documented, and reported.
The Analyst reviews the completeness and consistency of DORA documentation, provides constructive challenge within the authority of the role, and escalates material gaps, delays or inconsistencies through the appropriate governance channels.
This position is ideal for professionals with backgrounds in compliance, risk management, internal audit, operational risk, IT governance, regulatory reporting, or program coordination who are looking to develop expertise within a regulated financial services environment.
Job Specification and key responsibilities
DORA framework implementation and maintenance
Maintain the consolidated DORA implementation roadmap, clearly identifying accountable owners, milestones, dependencies and target dates.
Support the drafting and review of DORA-related policies, procedures, controls, methodologies, standards, templates and guidance.
ICT Risk and Control governance
Review the completeness and consistency of ICT risk assessments, control assessments, risk registers, risk-treatment plans and documented risk acceptances.
Register of Information and ICT third-party governance
Outsourcing and ICT third-party oversight
Monitor the availability and quality of due diligence, risk assessments, contractual assessments, approvals and supporting evidence.
Monitor concentration risk, subcontracting arrangements, service continuity measures, exit strategies and termination plans.
Digital operational Resilience Testing
Support a consolidated overview of planned and completed tests, scope, critical functions covered, findings, evidence, action owners and remediation dates.
Monitor testing activities including business continuity exercises, disaster recovery tests, backup restoration tests, scenario-based testing, vulnerability assessments and penetration testing.
Audit, evidence, and regulatory readiness
Maintain an audit-ready evidence repository covering DORA implementation, governance, third-party oversight, and remediation status.
Governance, management reporting and escalation
Report progress, dependencies, emerging risks, overdue actions and management decisions across the in-scope entities.
Bachelor's degree in Business Administration, Risk Management, Information Systems, Law, Compliance, or a related field.
The role holder is expected to demonstrate:
Disclaimer: Unsolicited CVs sent to Apex (Talent Acquisition Team or Hiring Managers) by recruitment agencies will not be accepted for this position. Apex operates a direct sourcing model and where agency assistance is required, the Talent Acquisition team will engage directly with our exclusive recruitment partners.
