To serve as the operational backbone of the IT Governance function. Reporting to the IT Governance Manager, this role ensures that strategic direction is translated into disciplined, high‑quality execution across policy management, compliance activities, and governance operations.
Governance Framework Implementation & Oversight
- Research and analyze new regulatory requirements (e.g., RMiT, Central Bank circulars).
- Maintain a multi-year Policy Development Calendar aligned with deadlines.
- Manage logistics of policy initiatives (stakeholders, version control, approvals).
- Provide dashboards and exception reports on policy progress.
- Represent Manager in working groups, ensuring strategic intent is reflected.
- Integrate Shariah compliance into IT governance processes.
Policy & SOP Lifecycle Management
- Draft, review, and maintain IT policies aligned with regulations (RMiT, SAMA, ISO 27001, Shariah).
- Standardize policy templates and taxonomy.
- Coordinate stakeholder feedback and approvals through governance committees.
- Develop SOPs with IT teams to operationalize policies.
- Conduct SOP walkthroughs to validate alignment with operations.
- Execute communication plans, training, and awareness programs.
- Track policy acknowledgments and training completion.
- Monitor exceptions, update procedures, and retire obsolete documents.
Regulatory Compliance & Audit Management
- Lead IT audits (internal, external, regulatory).
- Conduct gap analyses and implement new regulations.
- Prepare examination packages and respond to regulatory inquiries.
Risk Management & Reporting
- Facilitate IT Risk & Control Self-Assessments (RCSA).
- Develop and monitor KRIs/KPIs (policy exceptions, SOP adherence, remediation).
- Oversee issue tracking and ensure timely remediation.
Project & Change Governance
- Review IT projects for compliance and governance integration.
- Support vendor governance by reviewing SOC reports and contractual compliance.
Education & Experience
- Bachelor's degree in information technology, Computer Science, or a related field.
- 2–4 years of experience in an IT compliance, IT audit, or IT risk management role.
- Essential: Experience working within the Financial Services industry (Banking, Insurance, or Takaful) is highly preferred.
