IT Governance

Responsibilities

• Develop, implement, and continuously improve IT governance frameworks, policies, and procedures that ensure alignment with business goals
• Ensure the proper integration of IT governance with the organization's overall governance structure
• Regularly review and update governance frameworks to address emerging risks, regulatory changes, and industry best practices
• Monitor compliance with IT-related regulations, laws, and standards
• Work with legal, compliance, and audit teams to ensure IT policies and practices comply with regulatory and legal requirements
• Identify IT-related risks and establish mitigation strategies, focusing on minimizing business disruptions, security breaches, and data privacy concerns
• Conduct regular risk assessments and audits to evaluate the effectiveness of IT controls and governance processes
• Establish and enforce IT policies covering areas such as security, data management, risk management, software licensing, and vendor management
• Oversee the creation and maintenance of IT procedure manuals, guidelines, and best practices
• Ensure that IT policies and procedures are communicated clearly across the organization and adhered to by relevant stakeholders
• Collaborate with senior leadership and business units to ensure that IT strategy aligns with business goals and objectives
• Work with project managers and department heads to ensure that IT investments and initiatives support the organization's strategic direction and deliver value
• Ensure that key IT projects and initiatives are monitored and evaluated to ensure alignment with governance standards and business priorities
• Establish key performance indicators (KPIs) and metrics to assess the effectiveness of IT governance
• Monitor and report on the performance of IT operations, including risk management, compliance, and control effectiveness
• Prepare and present regular governance reports and dashboards to senior management and stakeholders
• Ensure that governance-related issues and risks are promptly communicated and addressed
• Build relationships with key stakeholders, including IT leadership, business executives, auditors, and compliance teams
• Educate stakeholders on the importance of IT governance and the role of compliance in protecting the organization's assets and reputation
• Ensure transparent communication of governance-related policies, processes, and changes within the IT department and the broader organization
• Lead initiatives for the continuous improvement of IT governance processes, controls, and risk management strategies
• Implement feedback loops, lessons learned, and best practices to enhance governance maturity over time
• Stay informed about emerging governance trends, technologies, and regulatory requirements to keep the governance framework up to date
• Ensure that third-party vendors and partners comply with the organization's IT governance standards and policies
• Review and assess vendor contracts and service level agreements (SLAs) for compliance with governance and risk management requirements
• Ensure that third-party audits and evaluations are conducted periodically to validate vendor compliance
• Oversee the process for managing IT incidents, ensuring that governance protocols are followed during the response, resolution, and post-incident reviews
• Ensure proper governance in change management processes, ensuring that all IT changes are documented, assessed, and approved per organizational policies

Requirements

• A Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field. Relevant certifications (e.g., ITIL, TMMI, etc.) are highly beneficial
• Minimum of 7-10 years of experience in IT governance, risk management, or compliance roles, with at least 2-3 years in a leadership position
• In-depth understanding of IT governance frameworks such as ITIL, or ISO 27001
• Knowledge of relevant industry standards and regulations
• Experience in the IT industry, particularly in software development or systems implementation. Knowledge of DevOps practices and CI/CD pipelines. Familiarity with cloud-based platforms and testing in cloud environments
• Strong knowledge of risk management practices, including risk assessment, mitigation strategies, and control frameworks
• Experience in managing IT governance projects and collaborating with cross-functional teams
• Strong ability to analyze governance and compliance data to identify trends, risks, and opportunities for improvement
• Exceptional written and verbal communication skills, with the ability to convey complex concepts clearly to stakeholders at all levels
• Ability to resolve issues related to governance, compliance, and risk management in a timely and effective manner

Preferred Skills

• Experience working with IT auditing and IT teams
• Familiarity with business continuity planning and disaster recovery processes
• Expertise in cloud governance and cloud security frameworks
• Knowledge of business intelligence and reporting tools to track IT governance metrics
• Knowledge in applying ISO/IEC 27001, ISO/IEC 20000, ISO/IEC 22301, ISO/IEC 27018, ISO/IEC 9001, CMMI, ITIL, TMMI is a plus