It Governance Executive

Description:

What You’ll Do:

· Conduct assessments of the organization’s IT governance framework, policies, procedures, and controls to ensure compliance with industry standards, regulatory requirements, and best practices.
· Develop and implement a comprehensive IT risk management program that identifies, assesses, and mitigates IT-related risks. This involves conducting risk assessments, establishing risk mitigation strategies, and monitoring the effectiveness of risk controls.
· Monitor compliance with relevant laws, regulations, and industry standards pertaining to IT operations, data privacy, and security.
· Develop and maintain IT governance policies, procedures, and guidelines that align with industry standards and regulatory requirements. Ensure these documents are regularly reviewed, updated, and communicated to relevant stakeholders.
· Collaborate with IT teams to develop and test incident response plans and business continuity/disaster recovery plans. Provide guidance on IT risk mitigation strategies and assist in incident investigations and remediation efforts.
· Define and implement key performance indicators (KPIs) and metrics to monitor the effectiveness of IT governance and risk management initiatives.
· Collaborate with various stakeholders to ensure effective communication, coordination, and alignment of IT governance and risk management activities.

What You’ll Bring:

· Bachelor’s degree in Computer Science, Information Systems, or a related field (Master’s degree preferred).
· Strong knowledge of IT governance frameworks such as COBIT and IT risk management methodologies.
· Familiarity with relevant industry standards (e.g., ISO 27001, PCI DSS). and SBP regulations
· Experience in conducting IT risk assessments and developing risk mitigation strategies.
· Proficient in analyzing complex IT systems, identifying vulnerabilities, and recommending appropriate controls.
· Excellent communication and interpersonal skills, with the ability to effectively communicate technical concepts to non-technical stakeholders.
· Strong analytical and problem-solving abilities, with keen attention to detail.
· Knowledge of incident response, business continuity, and disaster recovery planning.