Conduct independent risk assessments and challenge the first line's processes and control effectiveness across applications, business solutions, assets, and third-party relationships. * Develop and manage IT and security control frameworks, ensuring alignment with internal policies, industry best practices, and regulatory requirements (e.g., ISO 27001, NIST, SOC). * Produce independent risk reports for senior management and governance committees, synthesizing security risks and providing recommendations for risk mitigation. * Collaborate with the first line, providing support and challenge to enhance the effectiveness of security controls and practices. * Knowledge of control frameworks and audit methodologies within second line risk functions. * Strong communication and influencing s
more