Job Summary:
Supports the implementation, monitoring, and continuous improvement of IT Governance, Risk, and Compliance (GRC) programs to ensure adherence to organizational policies, regulatory requirements, audit obligations, and information security standards.
Key Responsibilities:
-Monitor compliance with IT policies, standards, procedures, and regulatory requirements
-Coordinate internal and external audit activities, including evidence gathering, validation, issue tracking, and remediation follow-up
-Support the development, review, communication, and maintenance of IT policies, procedures, and governance frameworks
-Assist in the implementation and monitoring of compliance initiatives such as ISO 27001, SoQM, and other governance programs
-Conduct quality assurance reviews of Service Desk tickets, Change Management Requests, manpower reconciliations, and other compliance-related processes
-Monitor operational and governance processes to identify compliance gaps and recommend corrective actions and process improvements
-Prepare governance reports, dashboards, key performance indicators (KPIs), and management presentations
-Track compliance metrics, audit findings, action plans, risk remediation activities, and status updates
-Lead and coordinate Technology Board activities, including agenda preparation, documentation, and follow-up of action items
-Support governance-related communications, awareness initiatives, stakeholder coordination, and other administrative activities as required
Qualifications:
-Bachelor’s degree in Information Technology, Information Systems, Computer Science, Information Security or a related field
-Preferably with more than 4 years of experience in IT Governance, IT Audit, Compliance, Risk Management, or Information Security
-With hands-on experience in IT Audit, including audit preparation, evidence gathering, control testing, and remediation tracking
-With experience supporting or implementing ISO 27001 compliance initiatives
-Has knowledge of IT controls, policies, procedures, and governance frameworks
-Possesses strong analytical, documentation, and report-writing skills
-Good communication and stakeholder management skills
-Preferably with experience participating in ISO 27001 certification, surveillance, or recertification audits.
-Preferably familiar with governance and compliance frameworks such as ISO 27001, COBIT, ITIL, NIST
-Preferably with experience in internal or external audit coordination
-Preferably with experience in quality assurance reviews, policy development, and process improvement initiatives
-Preferably has the following certifications: ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), CGEIT (Certified in the Governance of Enterprise IT), ITIL Foundation