Senior Advisor - Technology and Cyber Risk Management

• Participate in implementing the collaboration model with first-line-of-defencetechnology and cyber risk management stakeholders.

• Translate business needs and regulatoryrequirementsintorisksrelated to technology architectures, applications, projects and products.

• Perform diligent reviews of technology and cyber riskassessmentscompleted by the first line of defence.

• Provide second-line expert adviceduring supplier assessments and roundtablesrelated to new projects or products.

• Guide the definition, monitoring and resolution of action plans, exceptions and issues arisingfromassessments.

• Consolidate information and indicatorsrequired for quarterlyreporting for the business lines.

• Influence stakeholders, anticipatedifficult situations and ensure proactive communication at all levels of the organization.

Your Team: 

Within the second line of defence, you are part of the teamresponsible for technology and cyber risk management in relation to the business lines. You report to the Senior Director, Technology and Cyber Risk Management and Business Line Relations, and youworkcloselywith first-line-of-defence stakeholders, business sectors, IT teams and specialistswithin the Technology Risk and Cybersecurity Management Vice-Presidency.

Our team stands out for its expertise in cybersecurity, technology and risk management, as well as itsability to buildtrustedrelationshipswith business sectors. The rolecontributes to strengtheningoversight practices, supporting the Bank’s transformation and evolving the tools, methods and indicatorsthat enable sound, consistent and effective management of technology and cyber risks.

Wepromote a variety of continuouslearningapproaches to support yourdevelopment, includinglearningthrough action, knowledge sharing withcolleagues, participation in transformation initiatives and access to training content related to technologyrisk, cybersecurity, Cloud, architecture, DevSecOps, resilience and artificial intelligence.

In thisrole, youdevelop a cross-functional perspective on technology and cyber risksacross the business lines. You can deepenyour expertise by contributing to the evolution of practices, assessmenttools, reportingmechanisms and collaboration approacheswith the first line of defence, whilestayingcurrent on new methods, threats and risks in the field.

• Universitydegree or relatedexperience, with at least 10 years of experience in technologyrisk management and/or cybersecurity.

• Knowledge of information technologygovernance and cybersecurity in a large organization.

• Deep expertise in one or more areas such as technology and cyber risk, solution architecture, Cloud, software development, CI/CD, APIs, DevSecOps, large-scale transformation, obsolescence and technologydebt, disasterrecovery, resilience, networking or artificial intelligence.

• Relevant certification in cyber or IT, for example CISSP, CISA, CRISC, ISO 27001, CCSK, AWS Cloud Architect, Cloud DevOps Engineer or TOGAF.

• Ability to handleconfidential information withintegrity, judgment, maturity and professionalism.