About the Role

The role holder is responsible for the establishment, implementation, and continuous improvement of the Bank’s IT policy framework, internal control environment, regulatory compliance, technology risk management processes, and overall governance framework. The role ensures that technology operations align with business objectives, regulatory requirements, industry best practices, and the organization's risk appetite.

Key Accountabilities

• Develop, implement, and maintain the IT Governance, Risk, and Controls framework to ensure alignment with business objectives and regulatory requirements.
• Establish and oversee IT governance structures, policies, standards, and procedures, ensuring organization-wide compliance.
• Design, monitor, and continuously improve the IT internal control environment through control assessments and governance reviews.
• Ensure compliance with applicable regulatory, legal, and industry requirements, coordinating regulatory engagements and remediation of findings.
• Lead technology risk management activities, including risk assessments, maintenance of the Technology Risk Register, monitoring of Key Risk Indicators (KRIs), and reporting to governance forums.
• Coordinate internal, external, and regulatory audits, ensuring timely resolution of audit findings and effective stakeholder reporting.
• Develop governance dashboards, KPIs, KRIs, compliance scorecards, and management reports for executive leadership and the Board.
• Oversee governance of third-party technology risks, outsourcing, business continuity, and disaster recovery to ensure operational resilience.
• Drive continuous improvement of IT governance maturity through benchmarking, process automation, and adoption of industry best practices.
• Foster a culture of governance, accountability, compliance, and continuous improvement across the Technology function.
• Perform any other duties as assigned by the immediate supervisor in support of departmental and organizational objectives.

Qualifications

• Bachelor's degree in information technology, Computer Science, Information Systems, Cybersecurity, or related field.
• Preferred certifications include: CISA, CISM, CRISC and CISSP
• 4 - 5 years in IT governance, technology risk, IT audit, compliance, or information security.
• Experience within a regulated industry, preferably banking or financial services.
• Experience engaging with regulators, auditors, and executive management.

• Develop, implement, and maintain the IT Governance, Risk, and Controls framework to ensure alignment with business objectives and regulatory requirements.
• Establish and oversee IT governance structures, policies, standards, and procedures, ensuring organization-wide compliance.
• Design, monitor, and continuously improve the IT internal control environment through control assessments and governance reviews.
• Ensure compliance with applicable regulatory, legal, and industry requirements, coordinating regulatory engagements and remediation of findings.
• Lead technology risk management activities, including risk assessments, maintenance of the Technology Risk Register, monitoring of Key Risk Indicators (KRIs), and reporting to governance forums.
• Coordinate internal, external, and regulatory audits, ensuring timely resolution of audit findings and effective stakeholder reporting.
• Develop governance dashboards, KPIs, KRIs, compliance scorecards, and management reports for executive leadership and the Board.
• Oversee governance of third-party technology risks, outsourcing, business continuity, and disaster recovery to ensure operational resilience.
• Drive continuous improvement of IT governance maturity through benchmarking, process automation, and adoption of industry best practices.
• Foster a culture of governance, accountability, compliance, and continuous improvement across the Technology function.
• Perform any other duties as assigned by the immediate supervisor in support of departmental and organizational objectives.

• IT Governance
• Risk Management
• IT Audit
• Compliance
• Information Security
• Regulatory Compliance
• Technology Risk Management
• Control Assessments
• Governance Reviews
• Regulatory Engagements
• Risk Assessments
• Key Risk Indicators (KRIs)
• Audit Coordination
• Stakeholder Reporting
• Business Continuity
• Disaster Recovery
• Process Automation
• Benchmarking
• Industry Best Practices

• Bachelor's degree in information technology, Computer Science, Information Systems, Cybersecurity, or related field.
• Preferred certifications include: CISA, CISM, CRISC and CISSP