Overview
Oversee the organization's IT compliance and risk management framework by leading risk assessments, governance initiatives, and regulatory adherence efforts. Ensure IT systems, processes, and data handling meet all applicable legal, contractual, and industry standards while fostering a culture of compliance and accountability. Drive continuous improvement through proactive risk mitigation, staff training, and alignment of IT operations with evolving business and regulatory requirements.
Key Accountability Areas
Risk Assessment
- Identify and evaluate IT-related risks, vulnerabilities, and compliance gaps across systems, applications, and processes.
- Conduct regular risk assessments, security reviews, and audits to proactively detect potential threats and control weaknesses.
- Develop detailed risk reports, recommending mitigation strategies to strengthen IT security posture and compliance readiness.
Governance
- Lead the development, implementation, and enforcement of IT compliance frameworks, policies, and control mechanisms.
- Oversee adherence to regulatory requirements and organizational standards across IT operations and projects.
- Act as the primary liaison for internal and external audits, ensuring clear communication and timely resolution of findings.
Regulatory Compliance
- Interpret and implement regulatory requirements, industry standards, and best practices including ISO, NIST, GDPR, and local data protection laws.
- Ensure IT systems, data handling, and processes remain compliant with legal, contractual, and organizational obligations.
- Maintain comprehensive and accurate compliance documentation to support audits and demonstrate regulatory readiness.
Continuous Improvement
- Drive enhancements to IT compliance frameworks and risk management strategies to align with evolving regulations and business needs.
- Develop and deliver training programs to improve compliance knowledge and promote a culture of accountability.
- Foster continuous feedback loops and process optimization to strengthen IT security and compliance maturity.
Role Accountability
HR Proficiency:
- Ability to recruit, recognize and cultivate high performers and expose them in order to create a robust second line of management.
- Ability to recognize low performers and guide them to improve or release them.
- Ability to treat subordinates equally without any discrimination.
- Assessment criteria of subordinates is performance that leads to planned results.
- Ensure availability of delegation of authority matrix to have sufficient delegations as per company policy.
Responsibility:
- Must take full responsibility for his operation as per the job description and the required deliverables from this position, taking into consideration the general company guidelines.
- Able to anticipate problems and make the necessary proactive steps to prevent them
- Ability to take necessary and proper timely decisions.
Delivery:
- Deliver the required results in timely manner with required quality and cost.
- Making a Tangible Difference:
- Must make a tangible difference to his area of operation. and exceed business expectations.
Business Planning and Performance:
- Able to transform the corporate goals into business plans.
- Able to Plan, follow-up and execute those plans, whether they are annual or development plans.
- Monitor the plan performance and initiate action to strengthen results and take the corrective action accordingly.
- Provide periodic work progress reports.
- Responsible for monitoring and controlling budgets and expenses to achieve the optimum cost efficiency.
Organizational Development:
- Develop the organizational structure according to the current requirements taking into consideration future and development plans.
- Ensure availability of job descriptions for all job roles and deployment.
Business Process Improvements:
- Develop, coordinate well-defined written systems, policies, procedures, and seek automations opportunities as much as possible.
- Should be conversant and able to navigate through IT solutions especially those relevant to his job and business.
- Promote the automated systems and using them fully, to spread its culture.
Quality:
- Quality is considered as alfanar's prime competitive advantage as such, managers are expected to act accordingly.
Adaptation:
- Adapt to new and alternative techniques, technologies, management structures, and business models.
Health, Safety and Environment:
- Ensure a safe, secure, and legal work environment as per the standard regulations.
Qualifications
Academic Qualification
Bachelor Degree in Information Mgmt. Sciences & Systems
Work Experience
6 to 10 Years
Technical / Functional Competencies
- Applications System Analysis
- Applications System Design
- Information Technology
- Information Technology Industry Knowledge
- Compliance
- Compliance Management
- Compliance Monitoring
