Conduct risk assessments and analysis related to Digital & IT risks for products, new activities, operational initiatives, and IT projects.
Review and challenge internal policies, procedures, and guidelines from a Digital & IT risk perspective.
Analyze significant Digital & IT operational incidents, monitor corrective action follow-ups, and evaluate control effectiveness to minimize the risk of recurring incidents.
Perform monitoring and review of critical system controls, including user access management, system utilization, information security, and cyber resilience, in collaboration with the IT and Information Security units.
Manage the Digital & IT Risk Control Self-Assessment (RCSA) and Loss Event Database (LED) processes, including conducting socialization sessions, providing guidance to business units, reviewing assessment results, and preparing reports for management.