1

Serving as the focal person and coordinator of Group for, (i) State Bank of Pakistan (SBP) On-site Inspections, (ii) SBP Off-site Reviews, (iii) Internal Audits, (iv) External Audits, and (v) Compliance of regulations, so that the Group remains compliant to Central Bank regulations, internal policies & procedures. The role includes:

• Responsible for evaluating the design of internal control activities along with maintaining and updating key controls and ensuring all documentation is maintained accordingly
• Timely and accurate data / response submission to CCG / Regulators and internal / external audits teams, by coordinating with Group stakeholders
• Compliance to SBP Inspection reports and Regulations and timely updating the status to CCG / ITAM (Issue Tracking & Monitoring) / SBP / Working Groups etc
• Compliance of all internal / external audits on the agreed time. Follow up with stakeholders within Group and update/ liaison with Audit & RAR, Controls & Compliance Group
• To ensure compliance of Board/Committees meetings decision related to the Group
• To ensure identification/reporting of Key Risk Indicators (KRI’s) of the Group under Operational Risk Management Framework
• Perform annual walkthroughs over key operational processes for Identification of the Group process improvement areas
• Maintain all internal control documentation in line with Group internal control requirements

2

Preparation and regular review of Group processes under Committee of Sponsoring Organizations of the Treadway Commission (COSO) controls framework to ensure compliance of bank policies and procedures and proper documentation of existing roles and responsibilities. Facilitating relevant stakeholders/group in liaising with process-owners within the Group for review and update of documentation under COSO framework to ensure that the COSO documentation is updated and covers all key risks & related controls Responsible for execution of RCSA exercises within the Group to timely identify emerging risks. Further, to fix the specific control lapse(s) or process weakness and ensure smooth operation of the Group processes. Activities involves:

• Identification of RCSA entities and assigning risk rating to each entity
• Designing Control Self-Assessment Questionnaire for each entity
• Self-testing on set frequency and reporting to Risk Management Group (RMG) and Controls & Compliance Group (CCG)
• Monitoring and closure of identified control breaches
• Timely escalation of issues to Group Head Digital, Internal Control Department (CCG), and Business Processes & Systems Parameterization Division - Operations Group (BPSPD – OPG)

3

Playing a mentor role with team members across the business, ensuring constant improvement in their professional skills enabling them to be relevant in the digital age