Risk Assessments & Monitoring - Supports the execution of Technology and Cyber Risk oversight activities, including Risk and Control Self-Assessments (RCSAs), control monitoring, and risk identification activities. Assists in reviewing risk documentation, collecting evidence, tracking action items, and ensuring adherence to ORM policies, standards, and procedures.
Risk Events & Risk of Change Support - Supports monitoring and tracking of Risk Events (REV) and Risk of Change (ROC) activities. Assists with documentation, reporting, issue tracking, and follow-up activities to ensure timely escalation and resolution of identified technology and cyber risks.
Governance, Reporting & Data Management - Supports the development and maintenance of risk reports, dashboards, metrics, Key Risk Indicators (KRIs), and management reporting. Ensures completeness, consistency, and accuracy of risk information used for monitoring and decision-making.
Business Partnership & Risk Advisory Support - Works collaboratively with first-line stakeholders to communicate ORM requirements, risk management expectations, and governance processes. Supports risk reviews, policy adherence activities, and remediation tracking efforts to strengthen the control environment.
Continuous Improvement & Framework Support - Supports ongoing enhancement of ORM processes, methodologies, reporting capabilities, and governance practices. Remains informed on emerging technology, cybersecurity, and operational risk trends and contributes to process improvement initiatives.