IT GRC Manager – Governance, Risk & Compliance

About the role

The IT GRC Manager will lead the enterprise governance practice for both IT and OT, designing and implementing frameworks that ensure effective delivery of business objectives while meeting all statutory and regulatory obligations.

Key responsibilities

• Establish and maintain the enterprise governance framework for IT and OT.
• Develop, manage and enforce IT processes, policies, and procedures.
• Identify, assess and mitigate IT risks, producing risk assessments and briefing reports for senior management.
• Conduct governance awareness sessions across ENOC and support governance committees.
• Monitor compliance results, identify gaps, and drive corrective actions.
• Stay current on emerging technologies and recommend adaptations to policies and processes.
• Evaluate and recommend IT and information‑security products and services to reduce risk.
• Lead workforce planning, talent acquisition, performance management and team development.

Required profile

• Minimum Bachelor’s degree in Computer Science, Engineering, Business or equivalent.
• 10+ years of relevant IT experience, including 3+ years working with governance standards, frameworks, policies and procedures.
• Professional certifications such as CGEIT, COBIT 5, or Risk Management Professional (RMP) are preferred.
• Advanced knowledge of IT audit, risk management and regulatory trends.

Required skills

• IT governance frameworks (e.g., COBIT, CGEIT)
• Risk management methodologies
• IT audit and compliance processes

What we offer

• Opportunity to shape governance practices for a leading energy organization.
• Collaborative environment with internal and external stakeholders.
• Professional development and leadership growth.