Governance : Review and evaluate the companys SDLC processes ensuring compliance with governance standards such as code review testing and proper approvals before deployment.

Security in SDLC : Ensure security assessments (e.g. static and dynamic analysis) are integrated at each phase of the SDLC focusing on potential vulnerabilities.

Agile and DevOps : Assess the implementation of Agile and DevOps practices ensuring they meet compliance governance and risk management requirements.

ThirdParty Integrations : Evaluate and ensure that thirdparty integrations (e.g. APIs credit bureaus identity verification systems) are managed and secured in the development process.

Release Process Assurance : Review and assure release management processes ensuring alignment with change control policies proper approvals ...