Technology GRC Manager - ServiceNow GRC/IRM

edari; Dubai; On-site; AED 180,000 - 240,000; Full time

Job summary

edari is seeking a Technology GRC Manager in Dubai to lead the operationalisation and continuous improvement of Technology Governance, Risk and Compliance. You will own ServiceNow GRC/IRM, drive automation, and ensure audit-ready governance across Technology teams.

You will report to the Director – Cybersecurity, Risk & Assurance within the Information Technology department, and manage risk, controls, findings, and remediation activities in a complex environment.

Qualifications

• Experience building and maturing GRC programmes across technology functions.
• Hands-on implementation or operation of a GRC platform, preferably ServiceNow GRC/IRM.
• Ability to translate governance requirements into practical workflows and controls.
• Strong data governance, evidence collection, and audit-ready reporting.

Responsibilities

• Operationalise the Technology GRC framework aligned to strategy and risk appetite.
• Drive standardised governance, risk, control, and remediation practices across Technology teams.
• Own ServiceNow GRC/IRM workflows, data structures, dashboards, and reporting.
• Maintain the ServiceNow backlog and coordinate requirements, testing and adoption.
• Move from manual trackers to automated GRC workflows with a single source of truth.
• Monitor adoption, data quality, and compliance of GRC processes.
• Support risk identification, assessment, treatment, and escalation.
• Maintain traceability between risks, controls, findings, and remediation plans.
• Coordinate control monitoring, evidence collection, and remediation activities for key controls.
• Develop and maintain GRC procedures, playbooks, templates and governance records.
• Provide guidance and training to Technology stakeholders on GRC processes.
• Engage with risk, compliance, audit, security teams to avoid duplication of efforts.
• Availability preference: immediate or within 30 days.

Skills

GRC governance

ServiceNow GRC/IRM

Risk assessment

Data quality

Remediation tracking

Stakeholder management

Process automation

KPI development

Audit readiness

Communication

Education

Bachelor's degree in IT or related field

CRISC, CGEIT, CISA certifications

Tools

ServiceNow

Job description

We are looking for a Technology GRC Manager to lead the operationalisation and continuous improvement of Technology Governance, Risk and Compliance processes for our client, an esteemed group in Dubai.

This role requires hands-on ownership of GRC processes, ServiceNow GRC/IRM, technology risk and control management, workflow automation, data quality, remediation tracking, and audit-ready governance.

This role will begin on a 12-month contract, is highly renewable and will report to the Director – Cybersecurity, Risk & Assurance within the Information Technology department.

Key Responsibilities:

• Operationalise and mature the Technology GRC framework in line with organisational strategy, risk appetite, regulatory expectations, and recognised standards.
• Drive adoption of standardised Technology governance, risk, control, compliance, and remediation practices across Technology teams.
• Act as the Technology GRC business product owner and operational lead for ServiceNow GRC/IRM, including workflows, data structures, roles, dashboards, controls, reporting, and user adoption.
• Maintain and prioritise the ServiceNow GRC/IRM enhancement backlog and coordinate requirements, testing, implementation, adoption, and continuous improvement.
• Drive the transition from fragmented manual trackers to controlled ServiceNow GRC workflows and a reliable single source of truth.
• Monitor platform adoption, workflow performance, data quality, and compliance with required GRC processes.
• Support Technology risk identification, assessment, treatment, review, acceptance, and escalation, ensuring risks are accurately maintained and monitored.
• Maintain traceability between risks, controls, findings, obligations, issues, actions, and remediation plans.
• Support the mapping and maintenance of Technology control frameworks against relevant standards, including ISO 27001, ISO 20000, COBIT, and other applicable requirements.
• Coordinate control monitoring, evidence collection, control reviews, and remediation activities for key Technology controls.
• Maintain central visibility of Technology risks, audit findings, compliance obligations, issues, management actions, and remediation plans.
• Drive remediation actions through to closure by managing stakeholders, dependencies, blockers, escalation, and closure evidence.
• Identify overdue, stalled, or repeatedly followed-up items and ensure accountable owners maintain realistic remediation plans.
• Identify manual or inefficient GRC activities and implement workflow automation, process simplification, and continuous improvement initiatives.
• Establish and monitor GRC data standards covering accuracy, completeness, timeliness, consistency, ownership, and traceability.
• Develop operational dashboards and KPIs covering Technology risk, control effectiveness, action closure, overdue items, data quality, process adoption, workflow performance, and automation progress.
• Coordinate operational activities supporting audits, certifications, compliance reviews, governance forums, and regulatory initiatives while maintaining structured evidence and action repositories.
• Develop and maintain Technology GRC procedures, playbooks, workflows, templates, governance records, and accountability mechanisms.
• Provide practical guidance and training to Technology stakeholders to improve GRC process and platform adoption.
• Work closely with Technology risk, compliance, audit, security, and other relevant stakeholders to establish clear ownership and avoid duplication across GRC activities.
• 7-10 years of experience in Technology governance, risk, compliance, audit, GRC operations, process improvement, or transformation.
• Strong hands-on experience implementing, operating, or materially improving a GRC platform, with ServiceNow GRC / Integrated Risk Management / IRM experience strongly preferred.
• Experience translating governance and risk requirements into practical workflows, procedures, system requirements, data controls, and operational processes.
• Strong experience managing Technology risks, controls, findings, remediation plans, action tracking, and audit closure activities across multiple stakeholders.
• Experience delivering process automation, data-quality improvement, workflow optimisation, or operating-model maturity initiatives within a large or complex organisation.
• Strong understanding of Technology governance, risk assessment and treatment, control frameworks, compliance, audit, issue management, and remediation processes.
• Practical knowledge of ServiceNow GRC / Integrated Risk Management / IRM, including workflow design, data structures, reporting, testing, backlog management, and user adoption.
• Practical knowledge of ISO 27001, ISO 20000, COBIT, and other relevant Technology governance and control frameworks.
• Strong process design, procedure development, workflow optimisation, automation, and continuous improvement skills.
• Experience with GRC data governance, data-quality controls, operational dashboards, and KPI development.
• Strong documentation skills with an evidence-based and audit-ready approach.
• Strong execution and delivery focus, with the ability to drive actions through to closure.
• Structured, organised, self-motivated, and comfortable working within a developing function.
• Strong stakeholder management skills, with the ability to influence, challenge constructively, and collaborate across Technology and business functions.
• Ability to communicate technical and GRC matters clearly to business stakeholders.
• Analytical and solution-oriented, with the ability to identify root causes and implement practical improvements.
• Comfortable balancing hands-on delivery with manager-level ownership and accountability.
• Relevant certifications such as ServiceNow GRC / IRM, CRISC, CGEIT, CISA, ISO 27001 Lead Auditor / Implementer, ITIL, COBIT, Lean Six Sigma, or PMP are preferred.
• A Bachelor's degree in Information Technology, Information Systems, Risk Management, Business Management, or a related discipline is preferred.

Availability: Preference will be given to candidates available immediately or a maximum 30 days after accepting the offer.

We are looking for a candidate who will be able to work in United Arab Emirates.