IT GRC Specialist: Governance, Risk & Compliance

Sukuk Capital; Lahore Cant; On-site; PKR 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Annual Increment

Annual Performance Bonus

Provident Fund

Medical OPD/IPD/Maternity

Social Insurance

Paid Leaves

Leave Encashment

Paid Certifications

Engagement Activities

Reward & Recognition

Corporate Gifts

Annual Tour

Team Hangouts

Collaborative & Fostering Culture

Job summary

Sukuk Technologies is seeking an IT Governance, Risk & Compliance (IT GRC) Specialist with 3–5 years of relevant experience to implement and continuously improve our IT governance, risk, and compliance programs. You will establish risk frameworks, develop policies, and coordinate audits across IT infrastructure and services.

The role focuses on IT governance and controls, not cybersecurity, and offers exposure to ITIL/ISO 20000-based processes, vendor governance, and DR/BCP readiness.

Qualifications

• 3–5 years of relevant experience in IT GRC, IT risk, audits or controls.
• Experience implementing IT governance, risk, and compliance processes.
• Knowledge of IT risk assessment, control testing, and audit readiness.
• Familiarity with ITIL/ISO 20000 standards.

Responsibilities

• Implement and continuously improve the IT Governance Framework.
• Establish and maintain IT Risk Management Framework and IT Risk Register; identify, assess, monitor, and report technology risks across applications, infrastructure, cloud, databases, third parties, availability, capacity, and technology lifecycle.
• Develop, review, and maintain IT policies, standards, SOPs, and controls covering change/release, incidents, SDLC, access governance, backup, asset, vendor management, and IT operations.
• Establish and assess IT General Controls (ITGC), identify gaps, coordinate remediation with IT teams, maintain evidence, and ensure segregation of duties.
• Coordinate internal and external IT audits, including evidence collection, audit readiness, responses, tracking findings, remediation actions, ownership, and deadlines.
• Govern and monitor ITSM processes based on ITIL/ISO 20000 principles (incidents, problems, changes, service requests, SLA, capacity, availability, continual service improvement).
• Oversee governance of third-party vendors, business continuity and disaster recovery.
• Develop and report IT governance KPIs/KRIs and dashboards to the CTO and governance committees.

Skills

IT Governance

IT Risk Management

IT Audit

IT Controls

IT Service Management

Education

Bachelor’s degree in Information Technology/Computer Science

Tools

ITIL

ISO/IEC 38500

ISO/IEC 20000

Job description

Sukuk Technologies is seeking an IT Governance, Risk & Compliance (IT GRC) Specialist with 3–5 years of relevant experience to implement and continuously improve our IT governance, risk, and compliance programs. You will establish risk frameworks, develop policies, and coordinate audits across IT infrastructure and services.

The role focuses on IT governance and controls, not cybersecurity, and offers exposure to ITIL/ISO 20000-based processes, vendor governance, and DR/BCP readiness.