IT Governance & Risk Lead | ISO 27001/20000-1, BCP

astek middle east; As Sudiyah; On-site; OMR 15,000 - 27,000; Full time

Job summary

Astek Middle East is seeking an experienced IT Governance & Risk professional to drive the development, implementation, and continuous improvement of technology governance, risk, compliance, audit, business processes, and IT continuity practices.

The role requires hands-on work with ISO implementations and certifications, particularly ISO 20000-1, ISO 27001, and ISO 56002, and entails collaboration with IT, Risk, Audit, Cybersecurity to strengthen governance and resilience.

Qualifications

• Hands-on experience in ISO implementation and certification (ISO 20000-1, ISO 27001, ISO 56002)

Responsibilities

• Develop and maintain IT governance frameworks, standards, policies, and procedures.
• Drive compliance with regulatory requirements (SAMA CSFW, NCA, NDMO-PDPL).
• Lead IT process improvement and transformation initiatives.
• Oversee IT documentation, policies, procedures, and governance reporting.
• Manage IT audits, controls, compliance assessments, and remediation of audit findings.
• Identify and manage technology risks, KRIs, risk registers, and mitigation plans.
• Develop and maintain IT Business Continuity & Disaster Recovery plans including BIA, TRA, RTO/RPO.
• Lead ISO implementation and certification activities (ISO 20000-1, ISO 27001, ISO 56002).
• Collaborate with IT, Risk, Audit, Cybersecurity and other stakeholders to improve governance and resilience.

Skills

IT Governance & GRC

IT risk management

Stakeholder management & communication

Documentation & reporting

ISO implementation experience

Job description

Astek Middle East is seeking an experienced IT Governance & Risk professional to drive the development, implementation, and continuous improvement of technology governance, risk, compliance, audit, business processes, and IT continuity practices.

The role requires hands-on work with ISO implementations and certifications, particularly ISO 20000-1, ISO 27001, and ISO 56002, and entails collaboration with IT, Risk, Audit, Cybersecurity to strengthen governance and resilience.