IT Governance Officer

Zamil Offshore Services Company; Al Khobar; On-site; SAR 250,000 - 420,000; Full time

Job summary

Zamil Offshore Services Company seeks an IT governance lead to implement and support cybersecurity requirements within the IT function. You will develop and maintain governance frameworks, draft policies, manage ITIL processes, and report on compliance and risk to senior leadership.

Collaborating with Cybersecurity, Enterprise Architecture, and IT Operations, you will embed security into projects and drive continuous improvement across governance activities.

Qualifications

• Bachelor’s degree in IT, Information Systems, Computer Science, or a related field.
• 5–8 years in IT governance, IT compliance, IT risk management, or IT service management.
• Strong experience implementing ISO 27001 ISMS and ISO 22301 BCMS.
• Experience drafting policies, developing processes, and managing governance documentation.

Responsibilities

• Develop and continuously improve the IT Governance Framework based on ISO 27001, ISO 22301, COBIT, and ITIL.
• Govern IT policies, procedures, standards, and controls, ensuring alignment with cybersecurity and international standards.
• Establish and oversee ITIL processes including change, incident, problem, configuration, asset, and service management.
• Monitor compliance with governance controls, SLAs/OLAs, configuration standards, operational procedures, and performance metrics.
• Ensure changes and incidents are properly assessed, approved, documented, resolved, reviewed, and subject to lessons learned.
• Ensure accurate IT asset inventories and secure, version-controlled management of IT documentation, configurations, SOPs, architecture, and DR materials.
• Oversee ISO 22301 requirements, including BIAs, continuity requirements, DR documentation, testing, and readiness.
• Monitor third-party compliance, contractual obligations, SLAs, and business continuity requirements.
• Coordinate internal/external ISO audits, track findings and corrective actions, and ensure IT-related cybersecurity and risk-treatment actions are completed.
• Prepare governance dashboards and reports covering compliance, audit actions, SLA performance, service maturity, risks, and continuity readiness for senior leadership.
• Collaborate with Cybersecurity, Enterprise Architecture, and IT Operations to embed governance and security requirements into projects, changes, and technology implementations.
• Deliver governance and compliance awareness programs covering ISO requirements, ITIL, change management, service management, and policies.
• Identify process gaps, operational risks, audit recommendations, and regulatory changes, and drive ongoing improvements to the IT governance program.

Education

Bachelor’s degree in IT, Information Systems, Computer Science, or a related field

Job description

The role acts as the primary IT point of contact responsible for implementing and supporting cybersecurity requirements within the IT function

Key Responsibilities:

• IT Governance: Develop, maintain, and continuously improve the IT Governance Framework based on ISO 27001, ISO 22301, COBIT, and ITIL.
• Policies & Compliance: Govern IT policies, procedures, standards, and controls, ensuring alignment with cybersecurity and international standards.
• IT Process Governance: Establish and oversee ITIL processes including change, incident, problem, configuration, asset, and service management.
• Control & Performance Monitoring: Monitor compliance with governance controls, SLAs/OLAs, configuration standards, operational procedures, and performance metrics.
• Change & Incident Governance: Ensure changes and incidents are properly assessed, approved, documented, resolved, reviewed, and subject to lessons learned.
• Asset & Documentation Governance: Ensure accurate IT asset inventories and secure, version-controlled management of IT documentation, configurations, SOPs, architecture, and DR materials.
• Business Continuity & DR: Oversee ISO 22301 requirements, including BIAs, continuity requirements, DR documentation, testing, and readiness.
• Vendor Governance: Monitor third-party compliance, contractual obligations, SLAs, and business continuity requirements.
• Audit & Risk Management: Coordinate internal/external ISO audits, track findings and corrective actions, and ensure IT-related cybersecurity and risk-treatment actions are completed.
• Reporting & Leadership: Prepare governance dashboards and reports covering compliance, audit actions, SLA performance, service maturity, risks, and continuity readiness for senior leadership.
• Stakeholder Management: Collaborate with Cybersecurity, Enterprise Architecture, and IT Operations to embed governance and security requirements into projects, changes, and technology implementations.
• Awareness & Training: Deliver governance and compliance awareness programs covering ISO requirements, ITIL, change management, service management, and policies.
• Continuous Improvement: Identify process gaps, operational risks, audit recommendations, and regulatory changes, and drive ongoing improvements to the IT governance program.

Qualifications:

• Bachelor’s degree in IT, Information Systems, Computer Science, or a related field.
• 5–8 years of experience in IT governance, IT compliance, IT risk management, or IT service management.
• Strong experience implementing and maintaining ISO 27001 ISMS and ISO 22301 BCMS
• Experience in drafting policies, developing processes, and managing governance documentation.