Urszula Miozga

I’m an experienced Risk & Controls professional specializing in technology risk governance, operational resilience, cyber risk, control assessment, and regulatory compliance within global financial institutions. I drive strategic risk tooling initiatives, implement governance frameworks, and automate control assessment processes.

In my current role as a Senior Security Consultant and Local Controls Assessment Team Lead, I act as a process owner SME for ServiceNow Integrated Risk Management (SNOW IRM) capabilities within HSBC’s Chief Control Office Technology Risk Management tooling initiatives. I partner with senior leadership to define and embed cyber and technology control governance requirements, translating business, risk, and operational needs into technical and process specifications.

I’m known for end-to-end process ownership—process mapping, governance workflows, operating procedures, implementation guidance, and control governance documentation—while collaborating closely with ServiceNow developers, data engineering teams, and risk and controls stakeholders. I also support automation of control assessment through enterprise Qlik Dashboard solutions using validated centralized data sources, including data quality validation, visualization requirements, and governance reporting improvements.

Across prior roles at Standard Chartered, BNY Mellon, and AXA XL, I led cyber resilience and operational resilience governance aligned to DORA, EBA, PRA, and global information security standards; performed severe-but-plausible scenario testing; conducted regulatory governance and assurance/testing activities; and strengthened business continuity and resilience governance across EMEA operations. I bring a practical, compliance-led approach—performing DORA and NIST compliance gap assessments, advising remediation strategies, and delivering workshops and training that enable adoption of risk tooling and governance processes.