Job Description -
- Coordinate and monitor compliance with internal IT policies, standards, management directives, governance requirements, and assigned action plans.
- Monitor and coordinate IT compliance with applicable CBUAE regulations, regulatory circulars, and requirements communicated by Compliance, Information Security, and Risk Management.
- Establish and maintain a centralized IT compliance register covering applicable regulatory obligations, internal requirements, responsible IT units, deadlines, and compliance status.
- Conduct periodic IT compliance assessments and gap analyses against applicable regulatory requirements, internal standards, and relevant frameworks such as COBIT, ITIL, and ISO.
- Coordinate the assignment of compliance requirements to relevant IT units, monitor remediation plans, track milestones, and coordinate necessary changes with relevant stakeholders.
- Review new or amended regulatory requirements, assess their implications for IT processes and controls, and coordinate necessary changes with relevant stakeholders.
- Obtain and review supporting evidence from IT units to assess implementation of compliance requirements and validate remediation effectiveness.
- Act as the central IT compliance coordination point with Bank Compliance, Operational Risk, Information Security, and other relevant stakeholders.
- Develop compliance dashboards and periodic reports highlighting compliance status, identified gaps, overdue actions, emerging obligations, and significant issues requiring management attention.
- Day to day operations will include Audit findings closed on time, compliance review completion, policy review rate, regulatory adherence and ISO milestones.
Relevant Exp -5-8 years in IT Governance, IT Compliance, IT Audit or Risk Management.
Banking / Financial Sector Experience - Banking or financial services experience preferred.
Professional Certifications - CISA, CRISC, COBIT, ITIL, ISO 9001, ISO/IEC 20000 or ISO 27001 desirable.
Technical Competencies - Regulatory Compliance, Policy Management, Governance Controls, ISO Compliance, Audit Remediation and Reporting.
Managerial Responsibility - Not specifically required.