Head of Technology GRC

Role Purpose

Technology Risk and Assurance Management

• Establish and lead a comprehensive technology risk management framework that encompasses risk identification, assessment, mitigation, and continuous monitoring, aligned with enterprise risk appetite and regulatory expectations.
• Maintain and govern the IT risk register, ensuring accurate mapping of identified issues to relevant risk categories and facilitating timely updates and reviews.
• Oversee the design, implementation, and optimization of control mechanisms to ensure effective risk mitigation across all technology domains.
• Develop and report Key Risk Indicators (KRIs) to provide actionable insights into the performance and resilience of technology processes.
• Govern the lifecycle of audit findings and self-identified issues, ensuring timely resolution, root cause analysis, and sustainable remediation.
• Conduct independent assurance reviews to evaluate the effectiveness of technology controls, processes, and risk posture.
• Coordinate and manage internal and external audit engagements, acting as the primary point of contact for audit teams and ensuring alignment with audit scope and objectives.
• Provide strategic oversight on risk-related initiatives, ensuring integration with broader governance and compliance programs.

Technology Compliance and Control Management

• Define and enforce security and configuration standards across all technology platforms.
• Ensure compliance with regulatory and industry mandates.
• Establish and maintain technology controls to mitigate emerging risks and meet evolving regulatory requirements.
• Continuously monitor and enhance control effectiveness to safeguard technology assets.
• Technology ITSM Governance (Change, Release, Incident & Problem Management)
• Develop and implement ITSM processes covering Change, Release, Incident, and Problem Management, aligned with regulatory requirements and industry best practices.
• Establish governance frameworks to ensure consistent application of ITSM controls across the Technology division.
• Monitor the effectiveness of ITSM processes from all angles—operational performance, compliance, risk exposure, and stakeholder satisfaction.
• Govern emergency change approvals and facilitate CAB meetings with a focus on control integrity.
• Ensure traceability and integrity of configuration items throughout their lifecycle.
• Oversee incident and problem management governance to ensure timely resolution, root cause analysis, and continuous improvement.

Technology Governance and Process Management

• Establish and maintain a comprehensive governance framework for technology operations, ensuring alignment with organizational strategy, regulatory requirements, and industry standards.
• Develop, implement, and continuously enhance IT policies, standards, procedures, and methodologies to promote consistency, accountability, and operational excellence.
• Oversee the definition and tracking of performance metrics and KPIs to evaluate the effectiveness and value delivery of technology services.
• Govern the design and optimization of core technology processes, ensuring they are efficient, well-controlled, and compliant with internal and external requirements.
• Lead the governance of IT problem management across divisions, ensuring structured root cause analysis, resolution tracking, and continuous improvement.
• Provide strategic oversight of IT workforce planning, talent development, and sourcing strategies to ensure the organization is equipped with the right capabilities.
• Manage administrative governance related to IT facilities, seating arrangements, and general support services, ensuring operational readiness and compliance.
• Champion a culture of continuous improvement across the Technology division, driving initiatives that enhance service quality, operational resilience, and stakeholder satisfaction.
• Establish and enforce policies for cloud resource provisioning and usage.
• Ensure compliance with cloud security standards and regulatory requirements.
• Monitor cloud service performance and implement optimization strategies.
• Define roles and responsibilities for cloud governance across departments.
• Implement cloud cost management and budgeting controls.

Technology Finance Governance

• Lead the development of annual CapEx and OpEx budgets for the Technology division.
• Govern the implementation of financial plans, ensuring alignment with strategic priorities.
• Monitor budget utilization, cost efficiency, and financial compliance.
• Oversee financial reporting, forecasting, and variance analysis.
• Collaborate with Finance and other stakeholders to ensure transparency and accountability in financial planning and execution.

Business Relationship Governance and Oversight

• Establish governance frameworks to oversee the quality and effectiveness of Technology’s engagement with business units.
• Define and monitor relationship health indicators such as strategic alignment, responsiveness, and transparency.
• Facilitate governance forums and steering committees to ensure business representation in technology decision-making.
• Provide oversight on business demand intake and prioritization processes.
• Ensure structured reporting and review mechanisms are in place to maintain accountability and alignment.
• Align governance practices with business value delivery objectives.
• Integrate governance checkpoints within the value stream lifecycle.
• Facilitate continuous improvement through feedback loops in governance processes.
• Ensure stakeholder engagement and transparency in governance activities.
• Measure and report on governance effectiveness and value contribution.

Key Accountabilities of the role

• **Lead Technology Risk Management**
• Establish and oversee risk frameworks, registers, controls, and assurance activities.
• **Ensure Regulatory Compliance**
• Define and enforce compliance standards and controls across technology platforms.
• **Govern ITSM Processes**
• Implement and monitor Change, Release, Incident, and Problem Management processes.
• **Oversee Technology Governance**
• Develop and manage IT policies, performance metrics, and process frameworks.
• **Manage Financial Governance**
• Lead budgeting, financial planning, and cost control for Technology.
• **Govern Business Relationships**
• Oversee engagement quality, strategic alignment, an
• d governance with business units.
• **Provide Strategic Leadership**
• Align governance, risk, compliance, and finance with enterprise objectives.
• Specialist Skills / Technical Knowledge Required for this role:
• Enterprise Risk Management (ERM) Expertise.
• Regulatory Compliance Knowledge.
• IT Governance Frameworks.
• IT Service Management (ITSM).
• Audit and Assurance Management.
• Technology Financial Planning & Oversight.
• Control Design and Optimization.
• Performance Metrics & KPI Management.
• Stakeholder Governance & Engagement.