IT GRC Manager

Description

We are seeking a skilled IT GRC Manager to oversee our governance, risk, and compliance initiatives across the Southeast Asia region. The ideal candidate will have a robust background in IT risk management and a strong understanding of compliance requirements to help drive our organization's strategic objectives.

Responsibilities

• Develop and implement IT governance frameworks and policies in alignment with organizational goals.
• Conduct risk assessments to identify vulnerabilities and recommend appropriate mitigations.
• Monitor compliance with regulatory requirements and internal policies to ensure adherence.
• Collaborate with cross-functional teams to strengthen the organization's IT risk management practices.
• Provide training and guidance to staff on GRC best practices and compliance requirements.
• Prepare and present reports on GRC activities and findings to senior management.

Skills and Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• 5-9 years of experience in IT governance, risk management, and compliance (GRC).
• Strong knowledge of regulatory frameworks such as ISO 27001, NIST, and GDPR.
• Experience with risk assessment methodologies and tools.
• Proficiency in developing and implementing IT policies and procedures.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills to engage with stakeholders at all levels.
• Certifications such as CISM, CRISC, or CISA are preferred.