Responsibilities:

- As part of Internal Control Division, act as the second line of defense for IT risks by providing challenge and oversight over ICT risk management activities

-Preparing the annual control plan for Information Technology Area and executing periodical controls related to IT Risks, reporting control results;

- Perform controls related to access management, privileged access, change management, backup & recovery and vulnerability management;

-Perform controls regarding ICT third party service providers;

-Review and challenge IT risk assessments related to new systems, services, outsourcing arrangements and significant changes. Ensuring effective controls are designed before the implementation;

- Identifying IT processes with critical importance and carrying out risk assessment for these processes;

- Apply controls to mitigate the risks the Bank is exposed to and to ensures the compliance with the regulations in force;

- Presenting, reporting and following up of External Audit findings related to IT Area;

- Proactively manage IT finding tracking and documentation of status updates obtained via management action owners, and timely execution of remediation testing;

-Participates in the elaboration of working procedures, manuals, methodologies related to his/her activity and support proposals for updating and improving them when necessary.

Requirements:

- IT knowledge and expertise on Technology Processes and Systems such as Applications, Databases, Operating Systems, Network, Information Security;

- IT , Internal Control or Audit experience is an advantage;

- CISA / CIA - represents a plus or to be in the process of obtaining,

- Solid understanding of IT risk management and control;

- Ability to gather, analyze and evaluate information to convert to accurate and correct reports with strong analytical skills;

- A good understanding of legal and internal regulatory requirements; (DORA & ICT regulatory requirements)

- Making suggestions to the IT teams in determining the action plans regarding the detected findings;

- Process improvement oriented;

- Organizational and time-management skills;

- Ability to adapt to an ever-changing environment;

- Attention to detail and accuracy;

- Fluency in English.

Show more
Show less