Technology GRC Lead

The Technology GRC (Governance, Risk, and Compliance) Lead is responsible for ensuring that the organization’s IT infrastructure and operations adhere to regulatory requirements, industry standards, and internal policies.

This role involves developing, implementing, and managing comprehensive GRC programs to mitigate risks and ensure the integrity, confidentiality, and availability of information systems.

The lead will work closely with PMO, Information Security, and Technology Operations teams to evaluate the risks and compliance.

Job Description

1. Identify, assess, and prioritize IT risks, including cybersecurity threats, data breaches, and compliance risks.
2. Develop and implement risk mitigation strategies and controls to reduce the impact and likelihood of adverse events.
3. Conduct regular risk assessments to evaluate the effectiveness of risk management practices.
4. Collaborate with cross-functional teams to ensure risk management practices are integrated into all aspects of IT operations.
5. Ensure compliance with relevant laws, regulations, and industry standards, such as GDPR, UAE PDPL, and ISO 27001.
6. Develop and maintain compliance documentation, including policies, procedures, and audit trails.
7. Provide training and awareness programs to educate employees on compliance requirements and best practices.
8. Generate regular reports to senior management on GRC-related issues, risks, and compliance status.
9. Monitor and report on governance performance metrics and key performance indicators (KPIs).
10. Stay updated on emerging technology trends, regulatory changes, and best practices.

Desired Candidate Profile

1. Strong knowledge of IT governance frameworks (e.g., COBIT, ITIL).
2. Familiarity with regulatory requirements and industry standards (e.g., GDPR, ISO 27001).
3. Proficiency in risk assessment methodologies and tools (e.g., NIST, ISO 31000).
4. Excellent analytical and problem-solving skills.
5. Strong communication and interpersonal skills, with the ability to work collaboratively with cross-functional teams.
6. Detail-oriented and highly organized, with the ability to manage multiple priorities and deadlines.
7. Proactive and self-motivated, with a strong commitment to continuous improvement and professional development.
8. Bachelor’s degree in information technology, Cybersecurity, or a related field.
9. Minimum of 5 years of experience in IT governance, risk management, and compliance.
10. Professional certifications such as MCSE, Security+, CISM, CISSP, CISA, or CRISC are highly desirable.