Sylwia Latkowska

• Develop and validate internal cybersecurity and ICT risk management standards.
• Lead the implementation of DORA and NIS2 regulatory frameworks.
• Coordinate development and implementation of the cybersecurity strategy, including executive reporting.
• Supervise regulatory reporting in cybersecurity, especially under DORA.
• Coordinate ICT risk assessments, update threat landscape, conduct AFI surveys, and perform vertical/horizontal ICT risk testing.
• Define and monitor Key Control Indicators (KCI), particularly for vulnerability management, incident response, DLP, and cybersecurity awareness programs.
• Collaborated with 1LoD and 2LoD, providing oversight and challenge in cyber and technology risk.
• Worked with Audit, Risk, and Compliance teams to validate control frameworks and ensure regulatory readiness.
• Supported integration of cybersecurity risks into Risk Appetite Statements and RCSAs.

• Designed and implemented Key Control Indicators and cybersecurity metrics across the Group aligned with NIST, ISO, and DORA frameworks.
• Delivered global MI reports covering vulnerability management, SOC performance, and cybersecurity posture.
• Collaborated with 1LoD and 2LoD, providing oversight and challenge in cyber and technology risk.
• Worked with Audit, Risk, and Compliance teams to validate control frameworks and ensure regulatory readiness.
• Led a team performing thematic reviews, controls testing, and risk deep-dives.
• Supported integration of cybersecurity risks into Risk Appetite Statements and RCSAs.

• Oversaw IT transformation programs ensuring alignment with cybersecurity, business, and compliance goals.
• Provided senior management with risk exposure and control effectiveness reporting.
• Built delivery governance and compliance frameworks.

• Delivered final review of risk, performance, and budget outcomes for major transformation initiatives.
• Provided non-financial risk insights and reporting to senior executive stakeholders.

• Ensuring the delivery of all compliance and reporting processes in scope.

• Served as a strategic business partner to senior leadership by providing valuable financial insights, recommendations for improvement and accurate financial information necessary for decision-making processes.

Providing a business review for a key service transformation program. Creating AOP and use cases. Providing business performance summary for the Senior Management. Implementation of Target Operating Model.

• Led financial reporting, consolidation, and internal control projects across international environments in line with IFRS and compliance standards.

• Managed multiple projects simultaneously, prioritizing tasks according to deadlines while maintaining high-quality results.
• Assisted in the preparation of financial statements under local reporting requirements for foreign subsidiaries, ensuring accurate representation of consolidated results.