JOB SUMMARY
Provide support to the IT Governance and Compliance Section Head in the implementation and monitoring of regulatory compliance, governance functions, policy review, metric management, third-party risk management, incident response, training and awareness programs, as well as business continuity and resilience initiatives.
The role also involves assisting in the identification and implementation of process improvements to enhance the efficiency of governance and compliance functions. The incumbent is expected to develop the capability to assume leadership of the section in the absence of the Section Head, ensuring seamless operations and strategic alignment with the Bank's objectives.
JOB DESCRIPTION
- Assist in the development, enhancement, implementation, and monitoring of the IT governance framework, security policies, and baseline standards to ensure compliance with IT, information security, data protection, and financial regulations.
- Support continuous monitoring of regulatory changes and industry best practices to inform governance policy enhancements.
- Collaborate with internal stakeholders to ensure that governance improvements strengthen the Bank's overall risk management strategy and operational resilience.
- Assist in the collection and analysis of IT compliance metrics and key performance indicators (KPIs) for integration into performance dashboards.
- Support the establishment and monitoring of performance metrics to ensure accountability and continuous improvement in IT governance and compliance efforts. 3. Risk Management for IT Projects and Third-Party Vendors
- Support the validation of IT project risk assessments.
- Assist in conducting due diligence activities for third-party vendors and ensure that compliance requirements are incorporated into contractual agreements.
JOB QUALIFICATION
- Bachelor's degree in information technology, Risk Management, or a related field.
- Experience in IT governance, compliance, or risk management roles.
- Familiarity with regulatory requirements and industry standards (e.g., ISO 27001, NIST, PCI-DSS).
- Strong analytical, organizational, and communication skills.
- Ability to work collaboratively and independently, with a proactive approach to problem-solving
