IT Governance, Risk & Compliance

Abu Dhabi, United Arab Emirates | Posted on 03/09/2026

The Specialist – IT Governance, Risk & Compliance (ITGRC) is responsible for supporting the organization’s IT governance framework,risk management processes, and regulatory compliance initiatives. The role involves developing and maintaining IT policies, conducting risk assessments,coordinating internal and external audits, and ensuring that IT operationsalign with regulatory, security, and organizational requirements. The specialist works closely with IT, security, and business stakeholders to strengthencontrols, mitigate risks, and maintain compliance with applicable standards andframeworks.

• Supportimplementation and maintenance of IT governance frameworks such as COBITand ITIL.
• Assistin developing, reviewing, and maintaining IT policies, standards,procedures, and guidelines.
• Ensure alignment of IT processes with business objectives and corporate governance requirements.
• Monitoradherence to IT governance policies and elevate deviations.
• Conduct
  
  IT risk assessments and maintain the IT risk register.
• Identify,analyze, and evaluate risks related to IT systems, infrastructure, and processes.
• Workwith system owners to develop risk mitigation and remediation plans.
• Trackand report risk treatment progress to management.

• Support compliance with regulatory and industry standards such as International Organization for Standardization standards (e.g., ISO/IEC 27001), National Institute of Standards and Technology frameworks, and other relevantregulations.
• Maintain documentation related to compliance controls and evidence.
• Trackregulatory requirements and ensure IT processes remain compliant.

• Coordinate
  
  IT internal and external audits.
• Prepareaudit documentation and evidence for auditors.
• Track audit findings, corrective actions, and closure status.
• Assistin implementation and monitoring of IT controls.

• Preparegovernance, risk, and compliance reports and dashboards for management.
• Maintainrisk, control, and compliance documentation repositories.
• Support continuous improvement initiatives for IT control environments.

• Bachelor’sdegree in Information Technology, Computer Science, Information Security,or a related field.
• 3–6years of experience in IT Governance, Risk Management, Compliance, or ITAudit.
• Understanding of IT governance and security frameworks such as COBIT, ITIL, and ISO/IEC
  27001.
• Familiarity with risk assessment methodologies and compliance monitoring.

• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified in Risk and Information Systems Control (CRISC)

• ITrisk assessment and control evaluation
• Regulatory compliance and policy management
• Auditcoordination and remediation tracking
  
  Knowledge of IT governance frameworks
• Strong analytical and documentation skills
• Stakeholdercommunication and collaboration