Key Responsibilities:
Develop, implement, and maintain governance, risk management, and compliance policies and procedures.
Identify, assess, and monitor operational, financial, and IT-related risks.
Conduct regular audits and risk assessments to ensure regulatory compliance.
Advise management and staff on compliance obligations and risk mitigation strategies.
Monitor changes in laws, regulations, and industry standards to update policies accordingly.
Support the development of corporate governance frameworks and internal controls.
Prepare reports for senior management and regulatory authorities on risk and compliance status.
Qualifications:
Bachelor’s degree in Business Administration, Information Security, Cybersecurity, or a related field.
Strong understanding of regulatory requirements, risk management, and corporate governance.
Experience in compliance, auditing, or risk management roles.
Excellent analytical, organizational, and communication skills.
Ability to handle sensitive information and provide clear guidance to stakeholders.
Preferred Skills:
Certifications such as CRISC (Certified in Risk and Information Systems Control), CISA (Certified Information Systems Auditor), or ISO 31000.
Familiarity with IT governance frameworks (COBIT, NIST, ISO 27001).
Experience with GRC software tools and platforms.