Description
A career as a Senior Technology risk Advisor in the Technology, Cyber and Data risk Management team at National Bank means acting as a second-line expert to support oversight, consistency of practises and integrated governance of technology and cyber risks. This position allows you to have a positive impact on our organisation thanks to your in-depth knowledge of risk management, your mastery of technology frameworks and your ability to quantify risks in a structured and accessible way.
Your job
- Oversee and challenge technology, cyber and data risk management practises within the Bank's various entities, including subsidiaries, taking into account their operational and regulatory realities.
- Align subsidiaries and sectors with policies, control frameworks and risk appetite thresholds for technology and cyber risks.
- Carry out due diligence reviews of it and cyber risk assessments carried out by local teams, whether for projects, suppliers or products.
- Define and maintain risk scenarios based on the FAIR structure by integrating the specifics of the Bank's operational and international environments.
- Analyze and interpret data from sectors to quantify the frequency and financial impact of scenarios, then translate the results in an accessible way.
- Produce decision-oriented dashboards, analyses and reports on a quarterly basis, including comparisons between subsidiaries and with the group.
Your team
The Vice-President - Technology, Cyber and Data risk Management is a team of experts who work in an agile, proactive and collaborative manner to strengthen the Bank's technological resilience and improve practises on an ongoing basis.
In the Technology, Cyber and Data risk Management sector, you are part of a large team of experts and report to a Senior Manager. Our team stands out for its partnership approach with the it, Cyber and Data sectors, as well as its expanded mandate to support subsidiaries, whose maturity levels may vary. Our goal is to offer you maximum flexibility to promote your quality of life. This includes a hybrid work environment and a flexible and adaptable schedule.
The Bank values continuous development and internal mobility. Our personalised training programs, based on on on-the-job learning, help you master your profession and develop new fields of expertise. Tools such as the Data Academy, language training, the Harvard Learning Centre and coaching and mentoring support are available to you at any time.
Prerequisites
- A bachelor’s degree and approximately 7 to 10 years of relevant experience in technology and cyber risk management in a financial context or in organisations with several entities or subsidiaries.
- Proficiency in the FAIR methodology and demonstrate the ability to communicate risks in financial terms.
- In-depth knowledge of it governance, cybersecurity, architecture, cloud, compliance, internal control and risk management in international environments.
- Hold one or more professional certifications (e.g., CRISC, CISA, CISSP).
- Be familiar with ISO 27005, NIST FSC, NIST 800-53, COBIT or CIS frameworks.
- Proficiency in FAIR tools (e.g., RiskLens, FAIR-U) or GRC platforms (e.g., ServiceNow IRM).
