Information Technology Governance Manager

Role overview

Responsibilities

• Implement enterprise risk management objectives and manage the Risk & Control Self-Assessment process.
• Guide technology leadership on risk management and risk treatment; develop Key Risk Indicators and ensure IT risk reporting and escalation.
• Represent IT in operational risk forums and promote information risk awareness.
• Assess risks, reduce residual risk in line with risk appetite, and direct planning for cyber, fraud, and security threats, including emergency and disaster recovery strategies.
• Maintain IT policies, standards, procedures, and guidelines; analyze process gaps against best practices.
• Drive adoption and continuous improvement of international standards for IT.
• Plan IT governance, compliance, and awareness programs and deliver periodic performance reports.
• Represent the division on governance and compliance matters, including NESA, PCI, UAE CB, and CPR; coordinate audit, compliance, and process management.

Requirements

• Ability to implement enterprise risk management objectives and mandates.
• Ability to establish, manage, and review Risk & Control Self-Assessment processes.
• Capability to guide technology leadership on risk management and risk treatment options.
• Ability to develop and report Key Risk Indicators for measuring control effectiveness.
• Experience ensuring IT risk reporting and escalation are in place.
• Ability to conduct risk assessments aligned with target risk appetite and reduce residual risk.
• Capability in strategic direction, emergency planning, disaster recovery, and analysis of cyber, fraud, and security threats.
• Ability to maintain IT policies, standards, procedures, and guidelines and conduct best-practice gap analysis.
• Ability to design, implement, manage, review, and continually improve adoption of international IT standards.
• Ability to plan IT governance, compliance, and process-awareness programs and deliver periodic performance reports to management.
• Ability to represent the IT division on governance and compliance matters, including NESA, PCI, UAE CB, and CPR, and coordinate audit, compliance, and process management.