IT Governance, Risk & Compliance Officer

About the role

The IT Governance, Risk & Compliance (GRC) Officer will support the organisation’s IT governance, technology risk management and compliance framework. This role ensures policies are up‑to‑date, audit activities are coordinated and cybersecurity awareness programmes are delivered.

Key responsibilities

• Develop, implement and maintain IT and information security policies, standards and procedures.
• Maintain governance documentation to support risk management, audit readiness and regulatory compliance.
• Coordinate periodic policy reviews, track approvals, exceptions and documentation dates.
• Identify, assess and document IT and cyber risks using approved methodologies.
• Maintain risk registers, track treatment plans and monitor remediation progress.
• Support preparation of risk reporting for management and governance forums.
• Coordinate internal and external audit activities, collect evidence and track audit findings.
• Manage remediation actions, monitor progress and produce status reports.
• Develop and deliver cybersecurity awareness and training programmes, track completion and measure effectiveness.
• Liaise with IT, cybersecurity, risk, audit and business stakeholders to facilitate governance activities.

Required profile

• Bachelor’s degree in Information Technology, Information Systems, Information Security, Risk Management or a related field.
• Relevant experience in IT governance, risk management or compliance.
• Strong understanding of regulatory, contractual and organisational requirements.
• Ability to coordinate cross‑functional activities and communicate with stakeholders.

Required skills