Information Technology Advisor

Role summary The IT Advisor serves as an independent advisor to the Board of Management and provides strategic guidance, oversight, and recommendations regarding the Bank's information technology environment. The position is responsible for reviewing the effectiveness of IT governance, cybersecurity controls, IT operations, technology risks, digital initiatives, and regulatory compliance, and reporting observations and recommendations directly to the Board of Management. The IT Advisor shall independently assess the activities, controls, performance, and risk management practices of the Information Technology Department and provide professional advice to support sound decision-making and regulatory compliance. Duties and responsibilities 1. IT Governance and Oversight Review the effectiveness of the Bank's IT governance framework. Assess whether IT activities are aligned with the Bank's strategic objectives. Advise the Board of Management on technology-related matters and emerging risks. Monitor compliance with Board-approved IT policies, procedures, and standards. Evaluate the adequacy of management oversight over IT operations. 2. IT Risk Management Review the effectiveness of IT risk management practices. Assess technology-related risks affecting the Bank's operations. Advise the Board on significant IT risks and mitigation measures. Monitor risk indicators relating to cybersecurity, infrastructure, applications, and data management. Evaluate the Bank's readiness to address technology disruptions and cyber threats. 3. Cybersecurity Oversight Review cybersecurity controls and security governance practices. Assess compliance with information security policies and regulatory requirements. Monitor cybersecurity incidents and corrective actions. Evaluate vulnerability assessment and penetration testing results. Advise the Board on cybersecurity improvements and emerging threats. 4. Review of IT Operations Review the performance and effectiveness of the IT Department. Assess the adequacy of IT infrastructure, systems, and services. Monitor system availability, reliability, and operational efficiency. Evaluate change management, system implementation, and project governance practices. Review major IT projects and provide recommendations to the Board. 5. Regulatory Compliance Monitor compliance with Da Afghanistan Bank (DAB) regulations, directives, and guidelines relating to information technology and information security. Review implementation of regulatory recommendations and audit findings. Advise the Board regarding regulatory developments affecting technology operations. 6. Business Continuity and Disaster Recovery Review the effectiveness of business continuity and disaster recovery arrangements. Assess disaster recovery testing results and corrective actions. Evaluate the Bank's ability to maintain critical services during disruptions. Provide recommendations for strengthening operational resilience. 7. Reporting to the Board of Management Prepare independent reports for the Board of Management regarding: IT governance effectiveness. Information security and cybersecurity status. Technology risks and mitigation measures. IT operational performance. Regulatory compliance status. Significant technology incidents. Progress of major IT projects. Present findings, observations, and recommendations during Board meetings. Escalate significant concerns requiring Board attention. 8. Advisory Role Provide independent advice on: Digital transformation initiatives. Core banking systems. Information security programs. Technology investments. Outsourcing and vendor management. Emerging technologies and innovation. Support management and the Board in making informed technology decisions. 9. IT Procurement and Technology Acquisition Oversight Review and provide independent advice on the procurement of IT hardware, software, licenses, subscriptions, cybersecurity solutions, network equipment, and technology-related services. Participate in the evaluation and selection process of IT vendors, suppliers, and service providers to ensure transparency, value for money, and alignment with the Bank's strategic objectives. Assess technical specifications, requirements, and procurement proposals prior to submission for approval. Ensure that all IT procurements comply with the Bank's procurement policies, information security requirements, and applicable regulatory directives. Review technology contracts, service-level agreements (SLAs), maintenance agreements, and licensing arrangements from a technical and governance perspective. Provide recommendations to the Board of Management regarding major technology investments and procurements. Monitor the implementation and delivery of procured IT solutions to ensure that the Bank receives the agreed products and services. Advise management and the Board on technology standardization, vendor risks, system compatibility, scalability, and cost optimization. Participate as a technical advisor in procurement committees whenever technology-related procurements are being evaluated. Review and advise on all significant technology expenditures, including core banking systems, digital banking platforms, cybersecurity solutions, data center infrastructure, cloud services, and outsourced technology services. Job requirements Education Master’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field. Professional Certifications (Preferred) CISA (Certified Information Systems Auditor) CISM (Certified Information Security Manager) CISSP (Certified Information Systems Security Professional) CRISC (Certified in Risk and Information Systems Control) CGEIT (Certified in the Governance of Enterprise IT) COBIT Certification Experience Minimum 10 years of experience in banking technology, information security, IT governance, IT audit, or technology risk management. At least 5 years in a senior managerial, advisory, audit, or governance role. Experience in banking and financial institutions is strongly preferred. Competencies Strong understanding of banking technology and digital banking systems. Knowledge of IT governance frameworks and best practices. Knowledge of cybersecurity, information security, and technology risk management. Understanding of DAB regulations and banking industry requirements. Strong analytical and reporting skills. Excellent communication and presentation skills. Ability to provide objective and independent advice. High ethical standards and professional integrity.