IT GRC Specialist: Drive Governance, Risk & Compliance

Sukuk Capital | صكوك المالية; Lahore; On-site; PKR 900,000 - 1,500,000; Full time

Benefits offered by this job

Annual Increment

Performance Bonus

Provident Fund

Medical Coverage

Social Insurance

Paid Leaves

Leave Encashment

Paid Certifications

Engagement Activities

Reward & Recognition

Corporate Gifts

Annual Tour

Team Hangouts

Collaborative Culture

Job summary

Sukuk Technologies in Lahore, Pakistan is seeking an IT Governance, Risk & Compliance (IT GRC) Specialist with around 3–5 years of experience to lead IT governance, risk management, and controls across applications, infrastructure, and vendors.

You will implement IT policies, coordinate internal and external audits, maintain ITGCs, and report KPIs to CTO and governance committees. This role focuses on IT GRC rather than cybersecurity operations.

Qualifications

• Bachelor’s degree in IT/CS/IS; 3–5 years in IT Governance, IT Risk, IT Audit, IT Controls, or ITSM.
• ISO/IEC 38500, ISO/IEC 20000 or SAMA knowledge preferred.

Responsibilities

• Implement and continuously improve the IT Governance Framework.
• Establish and maintain IT Risk Management Framework and IT Risk Register.
• Develop, review, and maintain IT policies, standards, SOPs, and controls.
• Establish and assess IT General Controls (ITGC) and coordinate remediation.
• Coordinate internal and external IT audits and ensure timely closure of findings.
• Govern ITSM processes based on ITIL/ISO 20000; monitor SLAs and capacity.
• Oversee governance of third‑party tech vendors, BCP/DR readiness.
• Develop and report IT governance KPIs/KRIs and dashboards to CTO and committees.

Skills

IT Governance

IT Risk

IT Audit

IT Controls

IT Service Management

Education

Bachelor's degree in IT / CS / IS

Job description

Sukuk Technologies in Lahore, Pakistan is seeking an IT Governance, Risk & Compliance (IT GRC) Specialist with around 3–5 years of experience to lead IT governance, risk management, and controls across applications, infrastructure, and vendors.

You will implement IT policies, coordinate internal and external audits, maintain ITGCs, and report KPIs to CTO and governance committees. This role focuses on IT GRC rather than cybersecurity operations.