ICT Risk Manager, Risk Management Division

Job description

• Building, maintaining, and applying an effective and independent ICT Risk Management function in the Bank and its subsidiaries through:
• Identifying and measuring the ICT risks to which the Bank is or may be exposed;
• Performing regular assessments of changes and enhancements to regulatory requirements related to ICT risk management, including the impact of such changes on the Bank’s activities;
• Drafting advisory materials for the Management Board and Supervisory Board of the Bank to support the adoption of adequate preventive measures with regard to the rules, guidelines, standards, and best practices applicable to the Bank in the field of ICT risk management;
• Preparing reports for the CRO, the Management Board, and the Supervisory Board on relevant ICT risk management topics, including, but not limited to, the timely escalation of material risks and findings;
• Forming an independent expert view of the Bank’s ICT risk profile and challenging the decisions of the CIO, CISO, and business owners regarding cloud, outsourcing, and digital initiatives.