IT Governance & Risk Manager - Banking

ASA Microfinance Bank (Pakistan) Limited; Karachi Division; On-site; PKR 2,400,000 - 4,200,000; Full time

Job summary

ASA Microfinance Bank (Pakistan) Limited is seeking an experienced Information Technology Governance Manager to join its Head Office team. The role centers on IT governance, risk & compliance, IT audits and project governance.

You will coordinate across IT, Information Security, Risk, Compliance and Audit teams, ensuring regulatory adherence, developing dashboards, tracking observations, and driving governance improvements.

Qualifications

• 5 years of relevant experience in IT governance, risk & compliance, IT audit or project governance.
• Banking or financial services experience is preferred.
• Strong understanding of IT governance frameworks and regulatory requirements.

Responsibilities

• Support the development and maintenance of IT governance frameworks, policies, and procedures.
• Coordinate internal, external, and regulatory IT audits.
• Conduct IT risk assessments and monitor compliance activities.
• Track audit observations, risks, issues, and corrective actions.
• Monitor IT projects and ensure governance process compliance.
• Prepare governance dashboards, risk reports, and management updates.
• Coordinate with IT, Information Security, Risk, Compliance, and Audit teams.
• Support business continuity planning and disaster recovery exercises.
• Identify governance gaps and recommend process improvements.

Skills

IT governance

Regulatory compliance

Risk assessment

Auditing coordination

BCP/DR planning

VAPT awareness

Analytical thinking

Communication skills

Education

Bachelor's in IT/CS/Business Admin

Master's degree (advantage)

Tools

ISO 27001

ETGRM

NESA

Job description

ASA Microfinance Bank (Pakistan) Limited is seeking an experienced Information Technology Governance Manager to join its Head Office team. The role centers on IT governance, risk & compliance, IT audits and project governance.

You will coordinate across IT, Information Security, Risk, Compliance and Audit teams, ensuring regulatory adherence, developing dashboards, tracking observations, and driving governance improvements.