• Map and assess IT risks across the organization, conducting comprehensive risk assessments, preparing risk plans by process, and defining associated controls and action plans. • Consolidate and prioritize the backlog of strategic IT risks, monitor mitigation plans, residual risks and key risk indicators (KRIs), and flag deviations and improvement opportunities to leadership. • Coordinate activities with Focal Points and Risk Agents within IT divisions and integrate risk management with Compliance, Internal Audit, Internal Controls and Corporate Risk areas, strengthening cross-functional governance. • Support the creation and operation of IT governance and risk committees and forums, ensuring documentation, follow-up, traceability and periodic reporting to the Directorate and executive bodies. • Define, review and continuously evolve the IT governance model to raise institutional maturity and ensure coherence, transparency and strategic discipline across the Technology Directorate. • Orchestrate integration between technology, business and corporate areas, acting as the governance focal point with IT divisions and ensuring cross-functional alignment. • Implement and monitor prioritized mitigating actions, following up on execution with technical owners and ensuring continuous improvement in risk maturity and organizational compliance. • Promote a culture of IT governance, strategy and risk management, leading engagement, training and awareness initiatives with teams and partner areas. • Track the evolution of strategic governance and IT performance indicators (KPIs, KRIs, OKRs), ensuring sustainable performance and supporting decisions with evidence and structured analysis. • Conduct benchmarks, comparative studies and maturity diagnostics, researching market references and best practices (COBIT, ITIL, ISO 31000, ISO/IEC 38500) to propose improvements and position IT competitively.

• Execute day-to-day second-line Treasury risk monitoring activities — tracking and reporting on key risk indicators, risk limit utilization, and exposures across liquidity and funding risk, interest rate risk (IRR), price risk, and capital management, and escalating breaches or emerging concerns to the Director of Treasury Risk • Support independent review and credible challenge of first-line Bank Treasury activities, including cash flow management, ALM analysis, balance sheet positioning, investment portfolio management, and the design and outputs of stress testing — preparing written analysis and challenge documentation to support the Director's 2LOD positions • Prepare and maintain ALCO and board risk committee reporting materials, synthesizing Treasury risk monitoring data and 2LOD findings into clear, accurate reporting for senior management, the CRO, and the board risk oversight committee • Maintain and update Treasury risk policies, procedures, and program documentation in alignment with OCC, FDIC, and interagency guidance on interest rate risk, liquidity and funding risk, and capital management — ensuring documentation remains current as the program matures and the bank's risk profile evolves • Support review of stress testing scenario design, assumptions, and outputs — identifying gaps or inconsistencies between 1LOD assumptions and the bank's actual risk profile, and preparing structured written analysis to inform the Director's challenge position • Coordinate regulatory exam preparation and respond to OCC examiner and internal audit requests related to Treasury risk, ALM, liquidity and funding oversight; partner with other 2LOD risk domains to ensure Treasury risk considerations are integrated into enterprise risk reporting and cross-functional risk assessments

• Ensure Livelo's data volume is a secure, reliable, and democratized asset. • Design, implement and evolve Data Governance policies, rules, and standards. • Structure and maintain the Data Catalog and Data Lineage. • Define and monitor metrics, KPIs, and Data Quality rules. • Ensure compliance with LGPD guidelines and information security policies. • Act as a facilitator and bridge between Data Engineering, Architecture teams, and Business stakeholders.

• Conduct insurance risk management surveys on a range of moderate to complex risks • Execute risk management consultations at policyholders’ premises • Develop risk management programs recommendations based on observations • Initiate, provide, and share resources with policyholders and agency customers on risk management topics and trends • Provide quantitative/qualitative analysis with conclusions to drive customer service objectives • Manage workload assignments to attain agency customer engagement activities • Collaborate with underwriting and claims in new business acquisition and account retention • Conduct training sessions for the policyholder and agency customers • Serve as an advisor on risk management matters • Participate in assigned workgroups supporting profitability and service delivery