IT GRC Manager – ServiceNow Platform

About the role

We are seeking a Manager GRC – Information Technology to lead technology governance, compliance and risk initiatives for a major semi‑government organisation in Dubai. Reporting to the Head of GRC – Technology, the role is a long‑term contract focused on hands‑on ownership of the ServiceNow GRC platform.

Key responsibilities

• Own and operate the ServiceNow GRC platform, including configuration, module management and continuous enhancement.
• Manage Policy & Compliance, Risk Management, Third‑Party Risk Management and Regulatory Change Management modules.
• Maintain real‑time reporting dashboards for leadership and governance forums.
• Translate compliance and risk requirements into automated workflows and controls within ServiceNow.
• Align technology governance with standards such as ISO 27001, ISO 20000, ISO 42000, COBIT and ITIL.
• Lead ISO framework implementation, control mapping and gap assessments.
• Define and manage the technology compliance roadmap and policy lifecycle.
• Coordinate internal and external audits, ensuring system‑driven evidence and audit readiness.
• Monitor operational controls including access, change management, backup/recovery and CMDB governance.
• Support governance for emerging technologies such as AI/ML.

Required profile

• 10+ years of experience in technology risk, IT compliance or GRC within large enterprises.
• Hands‑on ownership of ServiceNow GRC platform; advisory experience alone is insufficient.
• Proven track record configuring, managing and operating GRC tools.
• Strong understanding of ISO standards, COBIT and ITIL frameworks.

Required skills

• ServiceNow GRC platform
• ISO 27001
• ISO 20000
• ISO 42000
• COBIT
• ITIL