IT Governance, Risk & Compliance

Job TitleSpecialist – IT Governance, Risk & Compliance (IT GRC)Contract: 1 yearJob SummaryThe Specialist – IT Governance, Risk & Compliance (IT GRC) is responsible for supporting the organization’s IT governance framework, risk management processes, and regulatory compliance initiatives. The role involves developing and maintaining IT policies, conducting risk assessments, coordinating internal and external audits, and ensuring that IT operations align with regulatory, security, and organizational requirements. The specialist works closely with IT, security, and business stakeholders to strengthen controls, mitigate risks, and maintain compliance with applicable standards and frameworks.Key ResponsibilitiesIT GovernanceSupport implementation and maintenance of IT governance frameworks such as COBIT and ITIL.Assist in developing, reviewing, and maintaining IT policies, standards, procedures, and guidelines.Ensure alignment of IT processes with business objectives and corporate governance requirements.Monitor adherence to IT governance policies and escalate deviations.Risk ManagementConduct IT risk assessments and maintain the IT risk register.Identify, analyze, and evaluate risks related to IT systems, infrastructure, and processes.Work with system owners to develop risk mitigation and remediation plans.Track and report risk treatment progress to management.Compliance ManagementSupport compliance with regulatory and industry standards such as International Organization for Standardization standards (e.g., ISO/IEC 27001), National Institute of Standards and Technology frameworks, and other relevant regulations.Maintain documentation related to compliance controls and evidence.Track regulatory requirements and ensure IT processes remain compliant.Audit & Control ManagementCoordinate IT internal and external audits.Prepare audit documentation and evidence for auditors.Track audit findings, corrective actions, and closure status.Assist in implementation and monitoring of IT controls.Reporting & DocumentationPrepare governance, risk, and compliance reports and dashboards for management.Maintain risk, control, and compliance documentation repositories.Support continuous improvement initiatives for IT control environments.RequirementsRequired QualificationsBachelor’s degree in Information Technology, Computer Science, Information Security, or a related field.3–6 years of experience in IT Governance, Risk Management, Compliance, or IT Audit.Understanding of IT governance and security frameworks such as COBIT, ITIL, and ISO/IEC 27001.Familiarity with risk assessment methodologies and compliance monitoring.Preferred CertificationsCertified Information Systems Auditor (CISA)Certified Information Security Manager (CISM)Certified in Risk and Information Systems Control (CRISC)ISO/IEC 27001 Lead ImplementerKey SkillsIT risk assessment and control evaluationRegulatory compliance and policy managementAudit coordination and remediation trackingKnowledge of IT governance frameworksStrong analytical and documentation skillsStakeholder communication and collaboration#J-18808-Ljbffr