Business Analyst DORA - ICT Risk

About the role

Capco ICT Risk is looking for a Business Analyst to join its team in Brussels. The role sits within consulting engagements focused on risk, regulation, business processes and technology, working with business, risk, compliance and technology stakeholders to turn regulatory expectations into clear, actionable requirements. A key part of the job is supporting clients with DORA implementation and compliance.

Key responsibilities

• Analyze business processes, systems and services to identify risks, dependencies and improvement opportunities
• Translate business, risk and regulatory requirements into clear business and functional requirements
• Support clients in understanding and implementing DORA requirements across business and technology processes
• Perform gap assessments and impact analyses against DORA, NIS2 and other regulatory requirements
• Support the design of processes, controls, policies and governance frameworks
• Gather and validate requirements with stakeholders across business, risk, compliance, security and technology
• Facilitate workshops, document outcomes and explain complex topics in clear business language
• Analyze and document risks in ICT risk, operational resilience, third-party risk, data security and access management
• Support remediation initiatives and define practical solutions and implementation roadmaps
• Manage workstreams independently and prepare client deliverables such as requirements, process documentation, risk assessments, reports and presentations

Required profile

• 5+ years of experience as a Business Analyst, IT Business Analyst, Risk Consultant, GRC Consultant or similar
• Demonstrable DORA experience, preferably in financial services
• Bachelor's or master's degree in business, economics, information systems, cybersecurity, risk management or a related field
• Good knowledge of French or Dutch (spoken and written) and English

Required skills

• Requirements gathering, business process analysis, gap analysis and stakeholder management
• Knowledge of frameworks such as ISO 27001/27002, NIST or CSA
• Experience in one or more areas such as ICT risk, operational resilience, third-party risk, incident management, business continuity, data security or IAM
• Strong analytical and problem-solving skills, and excellent communication skills
• Project experience and independent workstream management
• MS Excel and PowerPoint

What we offer

• A competitive salary package with benefits such as meal vouchers, insurance, car or mobility budget, phone and bonus
• The chance to work directly with clients on transformation projects in financial services
• A young, growing firm with a collaborative, inclusive culture