Senior Advisor, Technology and Cyber Risk Management

• Participate in implementing the collaboration model with first-line-of-defence technology and cyber risk management stakeholders.

• Translate business needs and regulatory requirements into risks related to technology architectures, applications, projects and products.

• Perform diligent reviews of technology and cyber risk assessments completed by the first line of defence.

• Provide second-line expert advice during supplier assessments and roundtables related to new projects or products.

• Guide the definition, monitoring and resolution of action plans, exceptions and issues arising from assessments.

• Consolidate information and indicators required for quarterly reporting for the business lines.

• Influence stakeholders, anticipate difficult situations and ensure proactive communication at all levels of the organization.

Your Team: 

Within the second line of defence, you are part of the team responsible for technology and cyber risk management in relation to the business lines. You report to the Senior Director, Technology and Cyber Risk Management and Business Line Relations, and you work closely with first-line-of-defence stakeholders, business sectors, IT teams and specialists within the Technology Risk and Cybersecurity Management Vice-Presidency.

Our team stands out for its expertise in cybersecurity, technology and risk management, as well as its ability to build trusted relationships with business sectors. The role contributes to strengthening oversight practices, supporting the Bank’s transformation and evolving the tools, methods and indicators that enable sound, consistent and effective management of technology and cyber risks.

We promote a variety of continuous learning approaches to support your development, including learning through action, knowledge sharing with colleagues, participation in transformation initiatives and access to training content related to technology risk, cybersecurity, Cloud, architecture, DevSecOps, resilience and artificial intelligence.

In this role, you develop a cross-functional perspective on technology and cyber risks across the business lines. You can deepen your expertise by contributing to the evolution of practices, assessment tools, reporting mechanisms and collaboration approaches with the first line of defence, while staying current on new methods, threats and risks in the field.

• University degree or related experience, with at least 10 years of experience in technology risk management and/or cybersecurity.

• Knowledge of information technology governance and cybersecurity in a large organization.

• Deep expertise in one or more areas such as technology and cyber risk, solution architecture, Cloud, software development, CI/CD, APIs, DevSecOps, large-scale transformation, obsolescence and technology debt, disaster recovery, resilience, networking or artificial intelligence.

• Relevant certification in cyber or IT, for example CISSP, CISA, CRISC, ISO 27001, CCSK, AWS Cloud Architect, Cloud DevOps Engineer or TOGAF.

• Ability to handle confidential information with integrity, judgment, maturity and professionalism.