Job Summary
Lead IT governance, risk, and compliance initiatives to ensure effective controls, regulatory compliance, risk management, and alignment with industry standards across the organisation.
The Day-to-Day Activities
Develop, implement, and maintain IT governance frameworks, policies, and procedures.
Ensure compliance with internal policies, regulatory requirements, and relevant industry standards, including GDPR, PDPA, ISO 27001, NIST, and PCI-DSS.
Lead IT risk assessments and audits, identify control gaps, and oversee remediation actions.
Work with internal stakeholders to embed IT controls into business processes and support incident response and business continuity planning.
Monitor compliance metrics and risk indicators, and provide regular reports to senior management.
Manage third-party risk assessments and vendor compliance reviews while staying updated on regulatory changes and emerging IT risks.