IT Governance, Risk & Compliance

Job Title Specialist – IT Governance, Risk & Compliance (IT GRC)

Contract:

1 year

The Specialist – IT Governance, Risk & Compliance (IT GRC) is responsible for supporting the organization’s IT governance framework, risk management processes, and regulatory compliance initiatives. The role involves developing and maintaining IT policies, conducting risk assessments, coordinating internal and external audits, and ensuring that IT operations align with regulatory, security, and organizational requirements. The specialist works closely with IT, security, and business stakeholders to strengthen controls, mitigate risks, and maintain compliance with applicable standards and frameworks.

• Support implementation and maintenance of IT governance frameworks such as COBIT and ITIL.
• Assist in developing, reviewing, and maintaining IT policies, standards, procedures, and guidelines.
• Ensure alignment of IT processes with business objectives and corporate governance requirements.
• Monitor adherence to IT governance policies and escalate deviations.

• Conduct IT risk assessments and maintain the IT risk register.
• Identify, analyze, and evaluate risks related to IT systems, infrastructure, and processes.
• Work with system owners to develop risk mitigation and remediation plans.
• Track and report risk treatment progress to management.

• Support compliance with regulatory and industry standards such as International Organization for Standardization standards (e.g., ISO/IEC 27001), National Institute of Standards and Technology frameworks, and other relevant regulations.
• Maintain documentation related to compliance controls and evidence.
• Track regulatory requirements and ensure IT processes remain compliant.

• Coordinate IT internal and external audits.
• Prepare audit documentation and evidence for auditors.
• Track audit findings, corrective actions, and closure status.
• Assist in implementation and monitoring of IT controls.

• Prepare governance, risk, and compliance reports and dashboards for management.
• Maintain risk, control, and compliance documentation repositories.
• Support continuous improvement initiatives for IT control environments.

• Bachelor’s degree in Information Technology, Computer Science, Information Security, or a related field.
• 3–6 years of experience in IT Governance, Risk Management, Compliance, or IT Audit.
• Understanding of IT governance and security frameworks such as COBIT, ITIL, and ISO/IEC 27001.
• Familiarity with risk assessment methodologies and compliance monitoring.

• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)
• ISO/IEC 27001 Lead Implementer

• IT risk assessment and control evaluation
• Regulatory compliance and policy management
• Audit coordination and remediation tracking
• Knowledge of IT governance frameworks
• Strong analytical and documentation skills
• Stakeholder communication and collaboration