IT Governance, Risk & Compliance Specialist

About the role

The IT Governance, Risk & Compliance (GRC) Specialist will lead the design, implementation and continuous improvement of IT governance, risk management and compliance frameworks across the Group. This role ensures that IT operations align with enterprise risk objectives, regulatory requirements and international standards.

Key responsibilities

• Develop, implement and maintain IT governance frameworks, policies, standards and procedures.
• Define and oversee the Group’s IT risk management methodology, risk assessments and risk register.
• Establish IT control standards aligned with ISO 27001, NIST, COBIT and regulatory requirements.
• Manage IT General Controls (ITGC) framework, review testing results and drive remediation.
• Act as primary liaison for internal and external audits and ensure audit readiness.
• Oversee cloud governance, data protection and third‑party risk management practices.
• Provide executive‑level reporting and advisory support on risk and compliance matters.

Required profile

• Bachelor’s degree in IT, Computer Science, Engineering, Information Systems, Accounting/IS or related field.
• 6‑10 years of experience in IT governance, IT audit, risk management or related disciplines.

Required skills

• ISO 27001
• NIST framework
• COBIT
• IT General Controls (ITGC)
• Cloud governance
• Data protection
• Third‑party risk management
• Risk assessment methodology