Operational Resilience Specialist (Assistant Vice President)

About Jefferies

Jefferies is a leading global, full-service investment banking and capital markets firm. The firm provides advisory, sales and trading, research, and asset management services across the Americas, Europe, the Middle East, and Asia. Jefferies is committed to building long-term relationships with clients and delivering differentiated insight, execution, and service.

Position Overview

Responsible for supporting and coordinating the Digital Operational Resilience agenda for Jefferies GmbH across EU locations, with a focus on DORA implementation, operational resilience governance, ICT incident reporting, resilience testing, crisis management, and related regulatory obligations.

Key Responsibilities

DORA Governance and Coverage:

• Ensure appropriate DORA coverage across all EU member states where Jefferies GmbH operates.


• Support alignment of local DORA activities with the global Operational Resilience Framework.


• Maintain relevant operational resilience policies, procedures, governance documentation, and reporting artefacts.


• Monitor EU technology and operational resilience regulatory developments relevant to Jefferies GmbH.

DORA Register of Information and ICT Service Oversight:

• Lead ongoing maintenance of the DORA Register of Information, including ICT service review, data quality checks, data normalisation, stakeholder coordination, and preparation of reporting packages.


• Maintain DORA function mapping and support review and attestation activities for ICT services within the Register of Information process.


• Coordinate regular working groups and stakeholder follow-ups required to keep DORA data complete, accurate, and submission ready.

ICT Incident Reporting and Regulatory Obligations:

• Support identification, assessment, classification, and reporting of ICT incidents in line with DORA requirements.


• Coordinate preparation of DORA incident reporting submissions where required, including input from relevant Technology and business stakeholders.


• Oversee Technology-owned BAU controls arising from DORA, including attestations, reporting obligations, employee training, and related evidence preparation.

Testing, Crisis Management, and Operational Resilience Execution:

• Plan, coordinate, and monitor execution of the DORA testing strategy and testing programme.


• Prepare, coordinate, and execute scenario testing for Jefferies GmbH, including stakeholder engagement and evidence capture.


• Coordinate Crisis Management activities, including maintenance of the Crisis Management Plan, execution of the JEG Crisis Coordinator role during crisis events, crisis exercises, and staff awareness activities.


• Act as an operational resilience partner for business users and local stakeholders within Jefferies GmbH.

Skills and Experience

• Experience in operational resilience, technology/ICT risk, business continuity, crisis management, or related control functions within financial services.


• Strong understanding of DORA requirements, including ICT risk management, incident reporting, resilience testing, third-party risk oversight, and the Register of Information.


• Knowledge of EU financial services regulatory expectations relating to operational resilience, outsourcing, technology governance, and incident management.


• Ability to interpret regulatory requirements and translate them into practical controls, procedures, governance actions, and BAU processes.


• Strong governance, documentation, reporting, and control execution skills, including preparation of policies, procedures, attestations, management updates, and evidence packs.


• Experience managing data quality, stakeholder inputs, and reporting processes for ICT services, business functions, and third-party dependencies.


• Practical experience supporting incident management, crisis response, business continuity exercises, or operational resilience scenario testing.


• Excellent stakeholder management, organisational, analytical, and communication skills, with strong attention to detail and the ability to manage multiple priorities.


• Experience with GRC, risk management, workflow, incident management, or data management tools beneficial.


• Relevant professional certifications, such as CBCI, ISO 22301, CISA, CRISC, ITIL, or similar, would be advantageous.

#LI-JD1