Mission.

The mission consists of strengthening IT and Cyber third-party risk management practices by structuring risk assessment processes, improving visibility on risk exposure, and enhancing control over third-party activities.

The role focuses on identifying, assessing, and mitigating operational IT and Cyber risks across applications, projects, and external partners, while ensuring alignment with Information Security policies and regulatory frameworks.

Beyond risk assessment, the objective is to improve consistency, governance, and monitoring of third-party risk activities, enabling better decision-making and optimized risk reduction at controlled cost.

The goal is to enable the organization to enhance its overall risk posture, ensure compliance, and strengthen control over third-party IT and security risks within a complex operational environment.

Key Responsibilities