Specialist - IT Governance & Risk (2 Year Contract)

Overview

Specialist - IT Governance & Risk

Purpose-

Responsibility-

• Develop, implement, maintain IT governance framework including IT policies, processes, guidelines, standards and ensure KPIs are defined and monitored to ensure IT systems and processes are aligned with business strategies and regulatory requirements.
• Develop, implement, maintain the IT Risk Assessment framework along with risk mitigation strategies and risk response planning as well conduct risk assessments aligned to regulatory requirements and international standards.
• Continuously monitor risk exposure and update risk management strategies as necessary.
• Prepare risk reports and metrics for management reporting and compliance requirements.
• Represent the IT Department as the ERM champion.
• Conduct regular audits and assessments to identify gaps in compliance and ensure corrective actions are taken.
• Support in IT’s internal and external audits and ensure effective management reporting of same.
• Responsible for ensuring compliance to ISO 27001:2022, ISO 20000:2018, Cyber Security Council, TDRA, and other government and regulatory requirements, in coordination with respective stakeholders.
• Develop long-term IT roadmaps and ensure IT strategies are scalable, sustainable, and support future business growth, in alignment with Authority’s goals and objectives.
• Identify emerging technologies, trends, and innovations that can enhance the Authority’s IT capabilities, providing recommendations for strategic initiatives.
• Excellence and the Alignment with the Government requirements
• Provide specialized reports to senior leadership maintain government enablers KPIs results and work on planning and implementing the government requirements.
• Participate in benchmarking activities for the department and provide overall report to the IT Director.
• Monitor and review internal controls for effectiveness and identify areas for improvement, fostering a culture of continuous improvement within the IT governance and risk management processes.
• Lead and oversee projects aimed at improving IT governance, risk management, compliance, and business continuity efforts.
• Provide expert technical advisory and recommendations on IT technologies and innovations to improve business performance, efficiency, and security.

Skills-

• A bachelor’s degree in IT with 5 years’ experience in a similar function, or Masters’ degree with 3 years’ experience, or as defined in the JD Matrix.
• Relevant certifications (e.g., CISSP, CISA, ITIL, ISO 27001, ISO 20000, CCSK etc.) are highly desirable.
• Hands-on experience with IT governance frameworks, risk management methodologies, and regulatory compliance standards.
• Experience in project management, preferably with certification in project management methodologies.
• Skilled in the development and implementation of IT policy and standards and IT process
• Excellent knowledge of managing risks and designing business continuity plans.