TAG IMF

Risk

• Lead the Risk and Process Mapping cycle, identifying inherent and residual risks in critical IT and Cybersecurity processes;
• Map data flows and technology dependencies, ensuring single points of failure are identified and mitigated;
• Provide consultative input in designing preventive, detective, and corrective controls for new products and infrastructure changes;
• Ensure traceability between mapped risks and controls established in security frameworks (NIST, ISO 27001);
• Develop and execute test plans to validate the operational effectiveness of IT controls (e.g., access management, encryption, audit logs, and patch management);
• Prepare management reports and presentations;
• Critically evaluate collected evidence, report weaknesses, and monitor action plans;
• Provide support to business and technology areas;
• Assist in developing training and promoting a control-oriented culture.

Senior Operational Risk Analyst