IT GRC & Resiliency Manager

About the role

The IT GRC & Resiliency Manager will lead enterprise risk management, governance, compliance and resilience initiatives within the IT division, particularly for banking systems.

Key responsibilities

• Implement enterprise risk management objectives and mandates.
• Establish, manage and review the Risk & Control Self‑Assessment process.
• Provide technology leadership, risk management guidance and risk treatment options.
• Develop and report Key Risk Indicators to measure control effectiveness.
• Ensure IT risk reporting and escalation mechanisms are in place.
• Represent IT in operational risk management forums and drive information risk awareness.
• Conduct risk assessments to align with target risk appetite.
• Define strategic direction, emergency planning, disaster recovery and analysis of cyber, fraud and security threats.
• Maintain IT policies, standards, procedures and conduct gap analysis against best practices.
• Design, implement and continuously improve ISO‑based IT management systems.
• Plan and manage IT awareness programs on governance and compliance.
• Deliver periodic performance reports and represent the division on governance matters internally and externally.
• Coordinate audit, compliance and process management activities within IT.

Required profile

• Bachelor’s degree in Computer Science, IT, Engineering or equivalent.
• Minimum 15 years of experience in IT Governance, Risk, Compliance and IT Management.
• Experience in banking or financial sector technology governance.
• Professional certifications such as CISA, COBIT, ISO 27001, ISO 9001, ITIL or equivalent.

Required skills

• CISA certification
• COBIT framework
• ISO 27001 knowledge
• ISO 9001 knowledge
• ITIL practices