Manager - Governance, Risk, Compliance and Resilience

Sharjah Islamic Bank; Sharjah; On-site; AED 320,000 - 540,000; Full time

Job summary

Sharjah Islamic Bank is seeking a Manager - Governance, Risk, Compliance and Resilience to lead IT GRC frameworks and align with enterprise risk management and regulatory requirements.

You will manage IT risk assessments, RCSA, KRIs, IT policies, and governance reporting, while overseeing IT disaster recovery and technology resilience with cross-functional coordination.

Strong leadership in a banking environment with knowledge of UAE regulations and ISO frameworks is essential for success.

Qualifications

• Bachelor’s degree in information technology, Computer Science, Information Systems, Cybersecurity or a related discipline.
• 10–12 years of relevant experience in IT Governance, Technology Risk Management, IT Compliance or Operational Resilience, preferably within banking or financial services.
• Professional Certifications: CISA, CRISC, CGEIT, CISM, ISO 27001 or ISO 22301 preferred.
• Knowledge of IT governance frameworks (COBIT, ISO standards) and UAE Central Bank regulations is essential.

Responsibilities

• Lead and oversee IT governance, risk management, compliance and resilience frameworks.
• Manage IT risk assessments, RCSA, KRIs, and governance reporting to support risk mitigation.
• Oversee IT disaster recovery planning, testing and resilience improvements.
• Develop and maintain IT governance policies, standards, procedures and guidelines.
• Coordinate with Internal Audit, Compliance and ITD for risk management and remediation actions.

Skills

IT governance

Technology risk management

Regulatory compliance

Operational resilience

Stakeholder management

Education

Bachelor's degree in IT/CS

Tools

GRC systems

Microsoft Office

Risk registers

Job description

Manager - Governance, Risk, Compliance and Resilience

Job Description

JOB PURPOSE:

To lead and oversee the development, implementation and continuous enhancement of the Bank’s IT Governance, Risk, Compliance frameworks, ensuring alignment with the Bank’s strategic objectives, enterprise risk management framework, regulatory requirements and industry best practices.

The role is responsible for managing IT risk assessments, Risk and Control Self-Assessments (RCSA), IT policies and standards, regulatory compliance monitoring, key risk indicators (KRIs), and governance reporting to support effective risk identification, mitigation and management.

Additionally, the role oversees the IT disaster recovery and technology resilience arrangements, working closely with relevant stakeholders to ensure preparedness, effective controls and continuous improvement.

• Implement and maintain the IT Risk Management Framework in alignment with the Bank’s Enterprise Risk Management Framework, approved risk appetite and regulatory requirements.
• Establish, coordinate and periodically review the IT Risk and Control Self-Assessment (RCSA) process to ensure effective identification, assessment and mitigation of technology-related risks.
• Provide guidance to IT stakeholders on risk identification, assessment, treatment and control enhancement to minimise residual risk exposure.
• Develop, monitor and report IT Key Risk Indicators (KRIs) to assess risk exposure, control effectiveness and emerging technology risks.

Monitor IT risk mitigation action plans and ensure timely escalation of significant risks, control weaknesses and overdue remediation activities.

Risk Monitoring, Reporting and Stakeholder Coordination

• Ensure effective monitoring, reporting and escalation of IT risks in accordance with the Bank’s established governance and risk management procedures.
• Represent the IT Division in relevant Operational Risk Management forums and cross-functional engagements.
• Promote IT risk awareness and accountability across the IT Division through appropriate communication, guidance and awareness initiatives.
• Coordinate periodic technology risk assessments and monitor residual risk exposures against the Bank’s approved risk appetite and tolerance levels.
• Liaise with Operational Risk, Information Security, Compliance and Internal Audit to ensure coordinated risk management and timely resolution of identified issues.

IT Resilience and Disaster Recovery Oversight

• Oversee periodic review and continuous enhancement of IT Disaster Recovery (DR) plans to ensure alignment with business continuity objectives and regulatory requirements.
• Coordinate with relevant stakeholders to assess technology resilience capabilities, disaster recovery preparedness and recovery strategies for critical IT services.
• Monitor disaster recovery testing, identified gaps and remediation plans to support the Bank’s operational resilience objectives.
• Provide governance oversight and risk-related guidance on technology disruptions and other technology related events that may affect IT services continuity.

IT Governance, Policies and Compliance

• Develop, maintain and periodically review IT governance policies, standards, procedures and guidelines to ensure alignment with regulatory requirements and industry best practices.
• Conduct periodic gap assessments against applicable regulatory requirements, internal policies and recognized industry standards.
• Oversee the adoption and continuous improvement of relevant IT governance and management standards, including ISO frameworks, where applicable.
• Plan and coordinate IT governance, risk and compliance awareness programmes to strengthen control awareness and accountability across the IT Division.
• Monitor compliance with approved IT policies and standards and coordinate corrective actions to address identified gaps.

Governance Reporting, Regulatory Coordination and Audit Support

• Deliver ITD periodic performance reports to management.
• Represents the Division on IT Governance and Compliance matters internally and externally in alignment with SIB processes communication practices (NESA, PCI, UAE CB, and CPR).
• Oversight the coordinate across the Audit, Compliance, Processes management and ITD.

FRAMEWORKS, BOUNDARIES & DECISION-MAKING AUTHORITY

The position operates within the Bank’s approved policies, procedures, governance frameworks and delegated authority limits.

The incumbent exercises independent judgement in managing day-to-day IT governance, risk and compliance activities, including risk assessments, control monitoring, regulatory coordination and management reporting.

The role is authorized to recommend risk mitigation measures, governance improvements and corrective actions within the assigned scope of responsibility.

Matters involving significant risk exposure, regulatory implications, material control deficiencies, policy exceptions or decisions beyond delegated authority shall be escalated to the VP – Head of IT Strategy and Governance for review, direction and approval, as appropriate.

The incumbent is accountable for the timely delivery of assigned objectives, effective stakeholder coordination and regular reporting of progress, key risks, challenges and improvement initiatives to the reporting manager.

QUALIFICATION, EXPERIENCE & OTHER SKILLS

Minimum Qualifications -Bachelor’s degree in information technology, Computer Science, Information Systems, Cybersecurity or a related discipline.

Minimum Experience -10–12 years of relevant experience in IT Governance, Technology Risk Management, IT Compliance or Operational Resilience, preferably within banking or financial services, including managerial or team leadership experience.

Professional Certifications -CISA, CRISC, CGEIT, CISM, ISO 27001 or ISO 22301 certification preferred

Technical / Regulatory Knowledge -IT governance frameworks, COBIT, ISO standards, IT risk assessment methodologies, RCSA, KRIs, disaster recovery, business continuity and regulatory compliance. Knowledge of applicable UAE Central Bank regulations, technology risk requirements and information security standards.

Computers/ Systems /Software Skills -Proficiency in Microsoft Office, reporting dashboards, risk registers and GRC systems.

Managerial Skills-Risk-based decision-making, analytical thinking, stakeholder management, communication, planning, coordination and problem-solving.

Languages –English & Arabic (Proficient)