IT Risk PMO

What you'll do

• Lead the development project and implementation of IT governance frameworks, policies, and standards
• Manage IT risk assessments, risk register, and remediation tracking
• Drive compliance initiatives (ISO 27001, SOC 2, GDPR, PDPA, etc.) and audit readiness
• Act as the main point of contact for internal and external audits
• Collaborate with security, engineering, and business teams to strengthen controls
• Provide risk insights and recommendations to stakeholders
• Support security awareness and incident response governance

Requirements

• Having professional certifications such as CISSP or equivalent (e.g., GISP, CISA, CISM, PCI QSA, CCISO, GSLC, CompTIA CASP+) would be a plus
• Bachelor’s degree or equivalent in Information Technology or Computer Science
• Minimum of 7  years work experience in IT GRC, Audit, or Security roles
• Experience in IT GRC, information security, or cybersecurity
• Prior experience in Financial Institutions is preferred
• Good understanding of ISO 27001, NIST, COBIT, SOC 2
• Strong risk assessment, documentation, and communication skills
• Ability to work cross-functionally with technical and non-technical teams
• Strong analytical skills and attention to detail