IT GRC Officer

Main Purpose: Lead IT Governance, Risk & Compliance (GRC) activities and manage IT/Fintech projects while ensuring compliance with CBUAE regulations, ISO 27001, UAE PDPL, and AML/CFT requirements .

Key Responsibilities:

• Maintain IT policies, risk registers, audits, compliance evidence, and regulatory reporting.
• Manage end-to-end IT and Fintech projects (planning, budgeting, risks, reporting, governance).
• Support security operations, vulnerability assessments, patch management, and audit readiness.
• Assist with Business Continuity and Disaster Recovery planning and testing.

Required Experience:

• Bachelor's degree in IT, Cybersecurity, Computer Science, or related field.
• 3 to 5 years' experience in IT GRC and/or IT Project Management.
• Mandatory experience in a UAE Exchange House, Money Services Business, or regulated financial institution with exposure to CBUAE requirements.

Preferred Certifications:

• PMP, PRINCE2, CAPM, CISA, CRISC, CISM, ISO 27001 Lead Auditor/Implementer, COBIT Foundation.

Key Skills:

• IT Governance & Risk Management
• Regulatory Compliance & Audits
• ISO 27001, PDPL, AML/CFT Controls
• Project Management (PMO)
• Stakeholder & Vendor Management
• MS 365, SharePoint, Power Automate, Risk Registers, RAID Logs

Reporting Line: Reports to the CTO and works closely with Information Security, Data Protection, Compliance, Risk, and Internal Audit teams.

Success Measures (KPIs):

• Timely audit closure
• Updated risk reporting
• Successful project delivery
• Compliance readiness
• Security and patch-management compliance