Information Technology Advisor

The IT Advisor serves as an independent advisor to the Board of Management and provides strategic guidance, oversight, and recommendations regarding the Bank's information technology environment. The position is responsible for reviewing the effectiveness of IT governance, cybersecurity controls, IT operations, technology risks, digital initiatives, and regulatory compliance, and reporting observations and recommendations directly to the Board of Management.The IT Advisor shall independently assess the activities, controls, performance, and risk management practices of the Information Technology Department and provide professional advice to support sound decision-making and regulatory compliance. 1. IT Governance and OversightReview the effectiveness of the Bank's IT governance framework.Assess whether IT activities are aligned with the Bank's strategic objectives.Advise the Board of Management on technology-related matters and emerging risks.Monitor compliance with Board-approved IT policies, procedures, and standards.Evaluate the adequacy of management oversight over IT operations.2. IT Risk ManagementReview the effectiveness of IT risk management practices.Assess technology-related risks affecting the Bank's operations.Advise the Board on significant IT risks and mitigation measures.Monitor risk indicators relating to cybersecurity, infrastructure, applications, and data management.Evaluate the Bank's readiness to address technology disruptions and cyber threats.3. Cybersecurity OversightReview cybersecurity controls and security governance practices.Assess compliance with information security policies and regulatory requirements.Monitor cybersecurity incidents and corrective actions.Evaluate vulnerability assessment and penetration testing results.Advise the Board on cybersecurity improvements and emerging threats.4. Review of IT OperationsReview the performance and effectiveness of the IT Department.Assess the adequacy of IT infrastructure, systems, and services.Monitor system availability, reliability, and operational efficiency.Evaluate change management, system implementation, and project governance practices.Review major IT projects and provide recommendations to the Board.5. Regulatory ComplianceMonitor compliance with Da Afghanistan Bank (DAB) regulations, directives, and guidelines relating to information technology and information security.Review implementation of regulatory recommendations and audit findings.Advise the Board regarding regulatory developments affecting technology operations.6. Business Continuity and Disaster RecoveryReview the effectiveness of business continuity and disaster recovery arrangements.Assess disaster recovery testing results and corrective actions.Evaluate the Bank's ability to maintain critical services during disruptions.Provide recommendations for strengthening operational resilience.7. Reporting to the Board of ManagementPrepare independent reports for the Board of Management regarding:IT governance effectiveness.Information security and cybersecurity status.Technology risks and mitigation measures.IT operational performance.Regulatory compliance status.Significant technology incidents.Progress of major IT projects.Present findings, observations, and recommendations during Board meetings.Escalate significant concerns requiring Board attention.8. Advisory RoleProvide independent advice on:Digital transformation initiatives.Core banking systems.Information security programs.Technology investments.Outsourcing and vendor management.Emerging technologies and innovation.Support management and the Board in making informed technology decisions.9. IT Procurement and Technology Acquisition OversightReview and provide independent advice on the procurement of IT hardware, software, licenses, subscriptions, cybersecurity solutions, network equipment, and technology-related services.Participate in the evaluation and selection process of IT vendors, suppliers, and service providers to ensure transparency, value for money, and alignment with the Bank's strategic objectives.Assess technical specifications, requirements, and procurement proposals prior to submission for approval.Ensure that all IT procurements comply with the Bank's procurement policies, information security requirements, and applicable regulatory directives.Review technology contracts, service-level agreements (SLAs), maintenance agreements, and licensing arrangements from a technical and governance perspective.Provide recommendations to the Board of Management regarding major technology investments and procurements.Monitor the implementation and delivery of procured IT solutions to ensure that the Bank receives the agreed products and services.Advise management and the Board on technology standardization, vendor risks, system compatibility, scalability, and cost optimization.Participate as a technical advisor in procurement committees whenever technology-related procurements are being evaluated.Review and ...