IT Governance, Risk & Compliance Expert

Job Purpose

Manage and ensure that systems, services and infrastructure work in accordance with good information technology (IT) governance.

Job Responsibility & Authority

1. Advise the board and senior management to ensure best practice IT in internal controls, SOP, governance, incorporating risk, and audit

2. Conduct internal audits to ensure organizational and program compliance with best practice, regulatory, including Data Protection and contract requirements

3. Perform security and compliance assessments on new and existing systems, processes, technology.

4. Collaborate to define IT security standards and develop supporting organizational policies.

5. Work with various business units or department to ensure controls are adequate, appropriate, and effective

6. Participate in disaster recovery and business continuity planning including backup system

7. Perform business impact analysis and assist with development of IT risk register

8. Stay up to date and informed on developing regulatory concerns and changing IT and information security trends.

9. Design, consult on, gain management approval for, implement, and change management for corporate compliance and risk processes to ensure governance & compliance are in place & well implemented

Job Requirement

Min. Education: IT/Computing Studies/Information System

Min. Experience: 2-3 years

Competencies:

A. Technical

- Strong understanding of fundamental information security concepts and technology (IT Knowledge)

- Experience with IT Governance, risk, and compliance management in a large environment

- Experience in IT Governance, Risk & Compliance for SOP design, creation, seeking approval, implementation, and change management process

- Have certification in IT security will be a plus

B. Softskills

- Problem Solving

- Building Relationship

- Team Collaboration

- Achieving Goals

- Trustworthiness

- Written and oral communication