As part of the IT Risk & Control Framework team, you will actively participate in:
ā¢ Managing technology and cybersecurity risks from a governance and control framework perspective.
ā¢ Participating in technology risk assessment processes (RCSA, risk assessments, gap analysis).
ā¢ Mapping Risks ā Controls ā KPIs/KRIs, ensuring traceability and consistency of the control framework.
ā¢ Analyzing audit findings (internal and/or external) and defining structured remediation plans.
ā¢ Implementing and monitoring regulatory requirements, especially in the areas of:
o DORA
o Operational Resilience
o Business Continuity
ā¢ Third Party Risk Management (TPRM):
o Third-party controls
o Outsourcing
o Technology providers
ā¢ Evaluation and improvement of policies, procedures, and technology standards.
ā¢ Preparation of:
o Procedures and formal documentation
o Dashboards and executive reporting
o Material for Risk and Technology committees
ā¢ Preparation of reporting for senior stakeholders in a global environment.
talan