INDEPENDENT ICT CONSULTANT to the Board of Directors

About this opportunity

Our Client, a leading State-Owned Licensed Bank in Sri Lanka, with a nationwide network and a growing digital footprint, seeks to appoint a distinguished Independent Consultant with deep Information and Communication Technology (ICT) expertise. The Consultant will provide independent, objective advice and assurance to the Board of Directors on the Bank's technology strategy, governance, delivery and resilience, as the Bank advances its digital transformation agenda.

What we’re looking for

A seasoned technology leader with a proven record at senior executive level (such as CIO, CTO, Head of Technology or equivalent, or as a senior adviser to the boards of regulated financial institutions), who combines strategic vision with hands-on delivery credentials.

Essential experience and expertise

IT governance and risk: Extensive experience designing, operating or assuring ICT governance frameworks (e.g. COBIT, ISO/IEC 27001, ISO/IEC 38500), including technology risk management, risk appetite, internal controls and Board-level reporting.

End-to-end software development lifecycle: Sound command of the full SDLC from requirements, architecture and design through build, testing, release, operations and retirement, including quality assurance, change and release management and application security.

Agile and modern engineering practices: Practical experience introducing and scaling agile delivery (Scrum, Kanban or scaled frameworks), DevSecOps, CI/CD and product-based operating models in a regulated, legacy-heavy environment.

Cloud infrastructure: Demonstrated experience in cloud strategy, architecture, migration and governance (public, private and hybrid), including data residency, vendor concentration, security and exit considerations for regulated entities.

Project management and delivery: A track record of directing or independently assuring large, complex technology programmes (for example core banking, payments, digital channels or data platforms), covering business case, budget, schedule, vendor management and benefits realisation.

Cybersecurity and resilience: Working knowledge of cyber defence, information security governance, business continuity and disaster recovery, aligned with regulatory requirements and international best practice.

Qualifications

A Bachelor's degree in Information Technology, Computer Science, Engineering or a related discipline; a postgraduate qualification (e.g. MBA or MSc) is desirable.

Not less than 15 years of progressive ICT experience, including at least 5 years in a senior leadership or advisory role, preferably in banking or financial services.

Relevant professional certifications are strongly preferred, for example CISA, CISM, CRISC, CGEIT, TOGAF, PMP / PRINCE2, SAFe / Scrum, or leading cloud architect certifications.

Knowledge of the banking business environment, the Central Bank of Sri Lanka's regulatory framework (including technology risk management and resilience requirements) and comparable international standards will be a distinct advantage.

Personal attributes and integrity

Exceptional integrity, sound judgement and the stature to engage credibly with Directors, senior management and external regulators.

Strong communication skills, with the ability to translate complex technical matters into clear, decision-ready advice for the Board.

The selected candidate will be required to furnish a formal Statement of Assurance confirming professional integrity, a clean record and good standing, and the absence of any conflict of interest, including any financial or commercial interest in technology vendors or service providers to the Bank.

SCOPE OF WORK
The Consultant will act in an independent advisory and assurance capacity (without executive or line authority) and will:

Technology strategy and governance: Advise on, and independently challenge, the Bank's ICT strategy, architecture and roadmap for alignment with business objectives, and review the ICT governance framework, policies and operating model.

Oversight of ICT operations: Monitor the strategic operations of the Bank's overall ICT infrastructure, including service availability, capacity, performance and the modernisation of core systems.

Delivery assurance: Provide independent assurance on major ICT projects and programmes, covering SDLC practices, agile delivery, project governance, budgets, timelines, quality and benefits realisation.

Cloud and infrastructure: Review cloud adoption and hosting strategy, architecture decisions and associated risk, regulatory and cost implications.

Cybersecurity and resilience: Strengthen cybersecurity and technology risk measures in alignment with prescribed regulatory standards and international best practice, and review incident response and business continuity readiness.

Procurement and vendor oversight: Oversee and evaluate major ICT procurement processes and significant vendor and outsourcing arrangements to ensure transparency, value for money and efficiency.

Policy and capability: Review and refine policies, frameworks and long-term strategies governing the Bank's ICT functions, and advise on technology talent, skills and succession.

Board reporting: Brief the Board and its designated Subcommittee regularly and present periodic independent reports with clear findings and recommendations

TERMS OF ENGAGEMENT

This is a strictly confidential, high-level engagement; the Consultant will be bound by confidentiality undertakings.

The Consultant will report directly to the Board of Directors and/or its designated Board Subcommittee.

The initial term of the consultancy will be one (01) year, which may be extended by mutual agreement subject to performance review.

What you can expect

A highly competitive, market-driven remuneration package commensurate with qualifications and executive-level experience will be offered to the selected candidate

HOW TO APPLY
Interested individuals who meet the above criteria are invited to submit an application comprising:

A comprehensive Curriculum Vitae (CV) highlighting relevant ICT, governance, delivery and corporate experience.

A brief covering letter (maximum one page) outlining suitability for the role.

Certified copies of educational and professional qualifications.

Contact details of two professional referees of executive standing.

Applications should be sent via email to mslrjobs@sltnet.lk, with the subject line "Application - Independent ICT Consultant to the Board – Quoting MSL Reference No. 8294", to reach us on or before 12 November 2026.

Please note: Only shortlisted candidates will be contacted. Canvassing in any form will lead to disqualification. The Bank reserves the right to accept or reject any application or cancel the recruitment process without assigning any reason.