1. Provide expert risk advice on existing technology and cyber risks, including digital transformation initiatives, cloud, and AI.

2. Identify emerging technology and cyber risks and assess their potential impact on the Bank’s operations and mandate.

3. Support and challenge first-line enterprise technology risk assessments, ensuring completeness, accuracy and alignment with the Bank’s risk appetite.

4. Perform independent design reviews of key IT general controls, including access management, segregation of duties, change management and configuration controls.

5. Review IT risk policies, standards and guidelines aligned to ISO, NIST and other relevant frameworks.

6. Review the effectiveness of incident and problem management processes, supporting root cause analysis and identification of control improvements.

7. Engage with IT and business stakeholders to promote risk-aware decision-making.

8. Prepare clear and insightful IT risk reports for governance forums, tracking remediation actions to closure.