IT GRC Manager

Job Purpose

Strategy/Governance

• Establishes the enterprise governance framework for IT and OT

Operational

• Manages the development of IT processes, policies and procedures and ensures compliance
• Manages IT risks and mitigation plans
• Manages IT governance awareness sessions across ENOC
• Supports the implementation of governance programs, committees and bodies.
• Monitor monthly and quarterly compliance results, identify compliance gaps and ramifications, and manage the development of corrective actions that tackle the root causes.
• Maintain knowledge of changing technologies, and provides recommendations for adaptation of new technologies, processes or policies.
• Recognize and identify potential areas where existing information technology or information security policies, standards and procedures require change, or where new ones need to be developed, especially because of future business expansion and technology advances.
• Provide management with risk assessments and briefings reports to advise them of critical information technology information security issues that may affect the company’s business objective and or compliance.
• Evaluate and recommend information technology and information security products, services and/or processes to reduce risk and maintain compliance with applicable policies, mandates, laws and regulations.

People and Talent Management

• Formulate workforce planning reports and talent acquisition plans.
• Set performance management objectives for all reportees and perform mid-year and year-end performance reviews.
• Manage the team’s productivity to achieve the set KPIs and service levels.
• Develop and coach the team to enhance their knowledge, skills, and performance.
• Manage and resolve team conflicts.

Stakeholder Management

• Build strong relationships and working collaboratively with internal/external stakeholders and customers to achieve objectives.

Education

• Degree: Minimum Bachelor’s degree in Computer Science, Engineering or Business field or equivalent.
• Preferable professional certifications: Industry certification in IT Governance (CGEIT, COBIT 5, etc.), Risk Management (e.g. RMP, etc.).

Experience

• 10+ years of relevant Information Technology experience.
• 3+ years of proven experience in working with governance standards, frameworks, policies and procedures for enterprise IT.
• Advanced knowledge of industry directions and trends in IT Audit, Risk Management and Regulations