Information Technology Governance Manager

ASA Microfinance Bank (Pakistan) Limited; Karachi Division; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

ASA Microfinance Bank (Pakistan) Limited is seeking an experienced Information Technology Governance Manager to join its Head Office team. The role centers on IT governance, risk & compliance, IT audits and project governance.

You will coordinate across IT, Information Security, Risk, Compliance and Audit teams, ensuring regulatory adherence, developing dashboards, tracking observations, and driving governance improvements.

Qualifications

• 5 years of relevant experience in IT governance, risk & compliance, IT audit or project governance.
• Banking or financial services experience is preferred.
• Strong understanding of IT governance frameworks and regulatory requirements.

Responsibilities

• Support the development and maintenance of IT governance frameworks, policies, and procedures.
• Coordinate internal, external, and regulatory IT audits.
• Conduct IT risk assessments and monitor compliance activities.
• Track audit observations, risks, issues, and corrective actions.
• Monitor IT projects and ensure governance process compliance.
• Prepare governance dashboards, risk reports, and management updates.
• Coordinate with IT, Information Security, Risk, Compliance, and Audit teams.
• Support business continuity planning and disaster recovery exercises.
• Identify governance gaps and recommend process improvements.

Skills

IT governance

Regulatory compliance

Risk assessment

Auditing coordination

BCP/DR planning

VAPT awareness

Analytical thinking

Communication skills

Education

Bachelor's in IT/CS/Business Admin

Master's degree (advantage)

Tools

ISO 27001

ETGRM

NESA

Job description

ASA Microfinance Bank (Pakistan) Limited is looking for an experienced and results-driven Information Technology Governance Manager to join its team at Head Office.

Qualification

• Bachelor’s degree in information technology, Computer Science, Business Administration, or a related field.
• Master's degree in a relevant discipline is an advantage.

No. of Years’ Experience

• 5 years of relevant experience in IT Governance, Risk & Compliance, IT Audit, Project Governance, or related functions.
• Banking or financial services experience is preferred.

Technical Competency

• Good understanding of IT governance frameworks, regulatory requirements, and banking compliance standards.
• Working knowledge of IT risk assessments, Risk Control Self-Assessment (RCSA), and information security controls.
• Experience in internal, external, and regulatory IT audits, including audit evidence management and observation remediation.
• Familiarity with frameworks and standards such as ISO 27001, ETGRM, and NESA.
• Knowledge of IT policies, procedures, SOPs, SLAs, and OLAs.
• Experience in IT governance reporting, dashboards, risk monitoring, and compliance tracking.
• Understanding of business continuity planning (BCP), disaster recovery (DR), and business impact analysis (BIA).
• Familiarity with IT project governance, change management, and project documentation.
• Working knowledge of vulnerability assessment and penetration testing (VAPT) processes.

Behavioral Competency

• Strong communication and coordination skills.
• Analytical and problem-solving abilities.
• Good documentation and reporting skills.
• Ability to manage multiple tasks and meet deadlines.

Job Responsibilities

• Support the development and maintenance of IT governance frameworks, policies, and procedures.
• Ensure compliance with regulatory requirements and internal IT policies.
• Coordinate internal, external, and regulatory IT audits.
• Conduct IT risk assessments and monitor compliance activities.
• Track audit observations, risks, issues, and corrective actions.
• Monitor IT projects and ensure compliance with governance processes.
• Prepare governance dashboards, risk reports, and management updates.
• Coordinate with IT, Information Security, Risk, Compliance, and Audit teams.
• Support business continuity planning and disaster recovery exercises.
• Identify governance gaps and recommend process improvements.
• Perform any other tasks and responsibilities assigned by the supervisor or management, relevant to the role and department.