It Grc Consultant

Description:

Job Description: -
·  Formulate comprehensive IT policies and procedures that dictate the standard operational flows and protocols within the organization, ensuring compliance with regulatory requirements.
·  Manage the T&D framework, including creation, review, update, awareness and monitoring of policies in alignment with organizational objectives and industry standards.
·  Keep up to date with regulations and prudential guidelines affecting information technology and information security, and continuously update the policies, standards and procedures.
·  Manage the development of the T&D policies, processes, and procedures to increase productivity, attain high quality outputs, and cost-effective results in line with relevant regulatory requirements and best practices.
·  Manage day-to-day activities to ensure compliance with stipulated policies, procedures and processes, and propose solutions to identified non-compliance cases.
·  Provide guidance to IT and drive technology best practices (COBIT, ISO 27001, NCA, ITIL etc…), while enshrining these with the T&D policies and procedures.
·  Develop and implement IT governance policies, processes, and procedures.
·  Supporting in developing the overall IT governance strategy, aligning it with business objectives and regulatory requirements.
·  Implement IT Governance frameworks (e.g., NIST Cybersecurity Framework, ISO 27001, Cobit 5, ITIL, etc…)
·  Monitor adherence to regulations & laws (e.g., SAMA, Insurance Authorities, Saudi Arabia Laws, NCA, PDPL, etc…) and internal compliance policies.
·  Managing critical information security compliance programs including Cobit 5, ISO 27001, SAMA CSF, NCA and compliance mandates from SAMA and NCA
·  Ensuring that all requirements of SAMA circulars, guidelines, Information Security Strategy, Information Security Framework and incorporated in the information security compliance program
·  Monitoring adherence to T&D Policies, processes, and procedures.
·  Manage the process of conducting and responding to compliance assessments.
·  Develop and deliver awareness training programs for employees.
·  Develop and implement metrics and reporting procedures to track the effectiveness of Tech governance and compliance.