IT Governance & Risk Specialist / Manager📣 إعلان

About the Role

Astek Middle East is seeking an experienced IT Governance & Risk Specialist / Manager to join our team in Jeddah, Makkah, Saudi Arabia. This full-time role requires 5-10 years of professional experience and focuses on driving the development, implementation, and continuous improvement of technology governance, risk, compliance, audit, business processes, and IT continuity practices. The successful candidate will ensure that IT governance frameworks, policies, processes, controls, and documentation align with organizational objectives and relevant regulatory and international standards.

Role Purpose and Impact

This position is critical for maintaining robust IT operations and ensuring adherence to established guidelines. A key aspect of this role involves hands-on experience with ISO implementations and certifications, specifically ISO 20000-1, ISO 27001, and ISO 56002. The specialist will play a vital part in enhancing efficiency, service quality, and overall technology resilience through strategic governance and risk management initiatives.

Key Responsibilities

• Develop and maintain IT Governance frameworks, standards, policies, and procedures aligned with business objectives.
• Drive compliance with SAMA CSFW, NCA, and NDMO-PDPL regulatory requirements.
• Lead IT process improvement and transformation initiatives to enhance efficiency and service quality.
• Oversee IT documentation, policies, procedures, and governance reporting.
• Manage IT audits, controls, compliance assessments, and remediation of audit findings.
• Identify and manage technology risks, Key Risk Indicators (KRIs), risk registers, and mitigation plans.
• Develop and maintain IT Business Continuity & Disaster Recovery plans, including Business Impact Analysis (BIA), Threat Risk Assessment (TRA), Recovery Time Objective (RTO)/Recovery Point Objective (RPO), and regular testing.
• Lead ISO implementation and certification activities, particularly ISO 20000-1, ISO 27001, and ISO 56002.
• Collaborate with IT, Risk, Audit, Cybersecurity, and other stakeholders to continuously improve technology governance and resilience.

Essential Qualifications and Experience

• Hands-on experience in ISO implementation and certification, specifically ISO 20000-1, ISO 27001, and ISO 56002.
• Strong experience in IT Governance, Risk & Compliance (GRC).
• Experience developing and implementing IT governance frameworks, standards, policies, and procedures.
• Experience with IT audit, controls, audit observations, corrective actions, and compliance monitoring.
• Strong understanding and practical experience with the SAMA Cyber Security Framework (CSFW).
• Knowledge and experience of NDMO-PDPL and NCA guidelines.
• Experience in IT risk management, including risk registers, KRIs, risk assessment, and mitigation.
• Experience with IT Business Continuity and Disaster Recovery, including BIA, TRA, IT BCP, RTO, and RPO.
• Strong IT process management and continuous improvement experience.
• Excellent stakeholder management, reporting, documentation, and communication skills.

Preferred Background

Candidates with prior experience working in a regulated environment are strongly preferred. This includes exposure to contexts where SAMA, NCA, NDMO-PDPL, ISO standards, IT audit processes, and technology risk requirements form an integral part of the IT governance landscape.

Work Environment

This is a full-time position based in Jeddah, Makkah, Saudi Arabia. The role involves collaboration with various internal and external stakeholders to achieve governance and compliance objectives.