Monitor and assess IT and cybersecurity risks across the organization, focusing on second-line oversight of the first line's risk management practices. * Develop and manage IT and security control frameworks, ensuring alignment with internal policies, industry best practices, and regulatory requirements (e.g., ISO 27001, NIST, SOC). * Conduct audits and provide oversight of IT and cybersecurity practices within the first line of defense, especially in third-party risk management. * Ensure the integration and coherence of risk management processes across different business units, with a focus on third-party risk. * Oversee the review of IT and security contractual clauses with , ensuring they meet second line's standards for risk management. * Experience working in financial services o
more