Senior IT Governance, Risk & Compliance Specialist

About the role

The Senior IT Governance, Risk & Compliance Specialist will lead the development and maintenance of IT GRC processes, ensuring they are documented, measurable, auditable and sustainable. This role works closely with IT, security, risk, internal audit and external auditors to align policies, controls and risk mitigation activities.

Key responsibilities

• Establish, develop and sustain IT GRC processes, including ITIL service management processes such as Incident, Problem, Change, Request, Configuration and Service Level Management.
• Prepare, update and review IT policies, procedures, standards and related documentation.
• Coordinate internal, independent and regulatory audit activities, provide audit evidence and track findings to closure.
• Identify, assess, document and monitor IT risks in the IT Risk Register and drive mitigation actions.
• Support compliance assessments against ISO 27001, COBIT, ITIL, NIST and other relevant frameworks.
• Monitor IT controls for information security, access management, patching, vulnerability, backup, logging and change management.
• Provide governance support for Business Continuity Management, Business Impact Analysis, Disaster Recovery and annual DR testing.

Required profile

• Bachelor’s degree in Computer Engineering, Computer Science, MIS, Industrial Engineering or related field.
• 4‑5 years of experience in IT Governance, Risk, Compliance, Audit or Information Security Governance.
• Hands‑on experience implementing ITIL processes and working with frameworks such as COBIT, ISO 27001 and NIST.
• Experience preparing audit evidence, tracking audit findings and supporting business continuity and disaster recovery activities.
• Strong analytical, documentation and reporting skills with the ability to communicate across technical and non‑technical stakeholders.

Required skills

• ITIL process implementation
• COBIT framework
• ISO 27001 standards
• NIST framework