DORA JET Members

Job Purpose

The European Supervisory Authorities (ESAs: EBA, EIOPA, ESMA) are looking for establishing a reserve list to support their oversight's mandate under the DORA regulation for the position of: DORA JET Member.

What is DORA?

The Digital Operational Resilience Act (i.e Regulation 2023/2554, or “DORA”), applicable from January 2025, establishes a comprehensive framework for fostering the digital operational resilience of all EU financial entities. It foresees, among others, that ICT third-party service providers that provide ICT services to financial entities and are identified as critical for the EU financial system (critical third-party providers - CTPPs) are subject to oversight at the EU level to minimise the risks they expose the EU financial sector to.

The CTPPs oversight is carried out by the three European Supervisory Authorities (ESAs) responsible for the EU financial sector, namely the European Banking Authority (EBA), the European Insurance and Occupational Pensions Authority (EIOPA) and the European Securities and Markets Authority (ESMA).  The ESAs exercise their CTPP oversight mandate in cooperation with the financial sector supervisory authorities (competent authorities) and the authorities responsible for the NIS2 Directive.

DORA requires a close cooperation between the three ESAs which exercise jointly their CTPP oversight mandate. The oversight work is organised in Joint Examination Teams (JETs), across the three ESAs. Staff recruited by the three ESAs for the DORA oversight activities work as one team under the leadership of the DORA Joint Oversight Director and closely liaise with colleagues responsible for other activities at the three ESAs. The JETs cover the various designated CTPPs according to the predominant technology domain in which they operate (cloud services, data centres, telecommunications, etc.).

Major purpose

The JET member will contribute to the delivery of the ESAs’ mandate for the oversight CTPPs under the DORA Oversight Framework.

As part of a multidisciplinary and cross-sectoral team, the JET member will contribute to the assessment of the resilience, reliability and systemic relevance of CTPPs and of the risks they may pose to the financial sector.

The role involves working collaboratively with colleagues from the three ESAs and with relevant competent authorities, bringing together expertise from different regulatory and supervisory perspectives.

The JET member will contribute to developing a common understanding of the risks arising from the provision of critical ICT services to financial entities and to strengthening the consistency of the ESAs’ oversight approach.

The position offers the opportunity to work at the forefront of ICT risk oversight in the European financial sector, in a rapidly evolving technological environment, including developments in areas such as cloud computing, artificial intelligence and digital infrastructure.

The role therefore combines technical and supervisory expertise with analytical judgement, teamwork and the ability to engage effectively with a wide range of stakeholders.

The successful candidates selected for appointment will be assigned to the DORA Oversight unit based in Frankfurt-am-Main. A reserve list may be established following this selection procedure. Candidates included on the reserve list may be invited to take up a similar position in Paris, if vacancies arise there and in accordance with the applicable recruitment procedures. Inclusion on the reserve list does not guarantee an appointment.

Main Responsibilities

The DORA JET Member will contribute to the oversight activities for the assigned CTPPs. His/her core tasks will be to:

• Conduct analyses of the technologies, configurations, and solutions used by CTPPs to determine if they fit with state-of-the-art standards and pose no risks to the digital resilience of the financial entities relying on them;
• Perform and document risk assessments, identifying risks and analysing their potential implications;
• Contribute to the annual risk assessment and the development of the annual oversight plan for CTPPs;
• Support additional relevant JET activities as needed.

In addition, the DORA JET Member will exercise core tasks in the context of on-going monitoring, general investigations (remote review) or on-site inspections (requiring business travel to CTPP premises), by performing:

• Desk-based reviews of CTPPs’ documentation, which can be of various types (technical documentation, data samples, but also policies, procedures, contractual arrangements, and other relevant information;
• Interviews of CTPPs’ officials.

The main engagement activities will involve a broad range of stakeholders, including but not limited to:

• CTPPs’ officials, through regular dialogue and meetings with the CTPP;
• All JET members from the assigned JET, and those from other JETs led by other ESAs;
• ESAs’ senior management.

Eligibility Criteria

• Thorough knowledge of one of the languages of the Union and a satisfactory knowledge of another language of the Union;
• Be a national of a Member State of the European Union, Norway, Iceland or Liechtenstein;
• Be entitled to their full rights as a citizen;[1]
• Have fulfilled any obligations imposed by the applicable laws on military service;
• Be physically fit to perform the duties linked to the post.[2]

[1] Prior to the appointment, the successful candidate will be asked to provide a Police certificate confirming the absence of any criminal record.

[2] Before being engaged, a candidate shall be medically examined by one of the institution’s medical officers in order that the institution may be satisfied that he fulfils the requirements of Article 12 (2)(d) of the Conditions of Employment of Other Servants of the European Communities.

Essential Skills and Knowledge

  · Qualification: a level of education, which corresponds to completed university studies preferably in Information and Communications Technology (ICT) or related fields (such as

    computer science, computer engineering, engineering, information security, software engineering, data analytics, audit, control, compliance, finance and accounting, business 

    administration) when the normal period of university education is three years or more;

    · Knowledge and/or expertise gained, preferably within the financial services industry, in at least one of the following areas:

o   Assessment of ICT risks (identifying, analysing, and/or mitigating ICT risks such as cybersecurity threats and/or operational weaknesses).

o   Development of ICT solutions or operations (such as cloud computing, telecommunication infrastructure, cybersecurity, data centre operations and/or data analytics solutions).

o   Governance and internal control frameworks for operational resilience, including risk mitigation strategies.

o   Third-Party Risk Management (TPRM) – evaluating and monitoring TPRM strategies, including assessing concentration risks, systemic dependencies, and the adequacy of exit plans for CTPPs. 

    ·  Excellent English written and oral communication skills

   ·  Working knowledge of MS Office, in particular Word, Excel and PowerPoint.

Desirable Skills and Knowledge

·      Knowledge and/or experience in regulatory provisions (such as DORA and/or other frameworks governing ICT or general risks);

·      Professional certifications and/or qualifications in the field of the vacancy notice (such as ICT security, operations, audit and/or internal control);

·      Experience in drafting high quality documents (such as assessment reports, policies and/or procedures);

·      Proven experience in a multicultural environment;

·      Knowledge of a third EU language.

Behavioural Competencies required

For the above position, the following behavioural competencies have to be fulfilled:

• Flexibility in terms of openness to taking over other tasks within the ESAs in view of the dynamic and evolving institutional environment;
• Excellent team player sharing relevant information and supporting team members without taking over responsibility for their work, able to work in different teams with different levels of stakeholders in a multicultural environment;
• Being able to have and express a critical view towards own performance and open to learn from experience;
• Communication: Being able to frame clear communication messages in line with audience experience, background and expectations, in an engaging manner; stand ground when needed; adopt appropriate influencing styles;
• Being able to establish and maintain cooperative relationships with staff and management at all levels, both inside and outside the organisation; understand who the internal and external stakeholders are as well as their needs and expectations;
• Very good organisation and prioritisation skills and ability to handle large volume of work in an efficient and timely manner;
• Analytical and problem-solving skills;
• Show a positive mindset: See obstacles as challenges and approach them with a can-do attitude; set high levels of quality and productivity for yourself; and demonstrate self-motivation. 

Contractual conditions

Place of employment

Frankfurt am Main, Germany.

Function group and grade

AD 5

Monthly basic salary

Step 1: 6,152.64 EUR

Step 2: 6,411.17 EUR

plus specific allowances where applicable*.

Envisaged start date

Starting from Q1 of 2027.

Contract type and duration

Successful candidates may be offered an employment contract for three years as a Temporary Agent. The contract may be renewed for a second fixed-term period, and upon its second renewal converted into a contract of indefinite duration.

Reserve list

Possibility of reserve list with validity until 31 December 2027 with possibility for extension. Please note that the reserve list may be shared with the European Securities and Markets Authority (ESMA) and the European Banking Authority (EBA). Upon establishment of the reserve list and upon request for access, EIOPA shall seek the consent of all candidates included on the reserve list.

Recruitment procedure

The recruitment process will include a panel interview and a written test. In addition, there may be a pre-screening exercise.

Applicants are required to act with the highest standards of integrity through the whole selection procedure.

The online application form should be submitted in English language.  

(1) Curriculum Vitae clearly indicating (among all):

Qualifications (please list exact dates of your academic qualifications gained)

Responsibilities, experience and skills gained in previous positions (please list exact dates of your work experience gained)

Nationality/Citizenship

Language skills

(2) Motivation explaining why you are interested in the post and what would be your added value you would bring to EIOPA if selected.

Applicants will be assessed on the basis of the eligibility and selection criteria specified in the vacancy notice and these must be met by the closing date of the vacancy notice.

Only information included in the Curriculum Vitae or in the Motivation are assessed.

Deadline for application is 23:59 CET on 09 November 2026.

The successful candidate will be required to make an annual declaration in respect of any interests which might be considered prejudicial to his/her independence. Before recruiting a member of staff, EIOPA’s Executive Director will examine whether the successful candidate has any personal interest which may impair his/her independence or any other conflict of interest. To that end, the successful candidate, using a specific form, shall inform the Executive Director via the Ethics Officer of any actual or potential conflict of interest.

For more information on the selection process of contract  agents and on the contractual and working conditions, please, refer to:

• Candidates Manual
• Implementing rules concerning the use and engagement of temporary agents
• Staff Regulations and Conditions of Employment of Other Servants of the European Communities