Validate the first line’s control testing and independently test the first line’s information technology, information security and data controls to verify the design and operational effectivenessLeverage the current Enterprise Risk Management framework and partner with IT, IS and Data teams to further mature the second line of defense technology and information security risk assessments, document controls, identify gaps, and create action plans for critical IT processes, including validation and testing to ensure IT risk programs are implemented and executed appropriately. Support the establishment of metrics to quantify and measure technology risks and provide review and challenge to the action plans of deficient metricsPerform oversight of the front-line’s management of IT/IS/Data activities and exception handling, including the documentation of IT changes, end-of-life technology, resiliency enhancements and testing, business impact analysis, vulnerability management, completion of action items related to addressing technology failures and disruptions, CDEs and data rules.