IT Governance Senior Specialist

About SiFi and the Role

SiFi is a rapidly expanding B2B FinTech company specializing in spend management and card issuance solutions. The company assists businesses in controlling expenditures, streamlining expense workflows, and enhancing operational efficiency. We are seeking an IT Governance Senior Specialist to establish and oversee the processes that govern how SiFi manages and evolves its technology. This full-time role is critical for a SAMA-licensed institution operating live payment systems, ensuring all production changes and service processes are controlled, traceable, and audit-ready.

Key Responsibilities

• IT Governance & Regulatory Alignment: Develop and maintain IT governance policies, standards, and procedures aligned with ITIL 4 and the SAMA IT Governance Framework. Conduct gap and maturity assessments against SAMA requirements, managing remediation plans to closure. Prepare evidence and coordinate internal, external, and regulatory audits of IT governance controls. Collaborate with Cybersecurity GRC, Risk, and Compliance on shared controls.
• IT Service Management: Co-design, implement, and continuously improve ITSM processes with Infrastructure, Engineering, and Cybersecurity teams, covering incident, problem, service request, service level, configuration and asset, and knowledge management. Define and maintain the IT service catalogue, SLAs, and OLAs. Monitor third-party and vendor service levels and escalate breaches. Configure process workflows in the ITSM platform and drive adoption.
• Change Management: Design and govern the change management framework, including change request standards, risk and impact classification, Change Advisory Board (CAB), and post-implementation reviews. Identify and track IT risks and control gaps from technology changes, ensuring mitigating controls and ownership are defined and remediation actions are followed. Monitor adherence, verifying that production changes are approved, tested, segregated, traceable, and have rollback plans, escalating non-compliance. Track change success rates, failed changes, and unauthorized changes.
• Access Governance & IAM Oversight: Govern user access lifecycle processes, including joiner, mover, and leaver activities. Define and coordinate periodic user access reviews across systems and applications. Govern role-based access, least privilege, privileged access, and segregation of duties requirements. Monitor access exceptions, dormant accounts, excessive privileges, and unresolved access issues. Coordinate with IT, Engineering, Cybersecurity, HR, and system owners on IAM governance and remediation.
• Reporting & KPIs: Produce IT governance and service management KPIs/KRIs for management and committees. Track audit findings and regulatory action items, reporting status to closure.

Qualifications and Requirements

• Minimum of 6 years of experience in IT governance, IT service management, or change management, preferably within banking, payments, or another regulated financial services environment.
• Expert, hands-on knowledge of ITIL; ITIL 4 Foundation certification is required.
• Proven track record in designing and governing a change management process, including facilitating CAB, in a live production environment.
• Strong stakeholder management skills, with the ability to drive process adoption across engineering, infrastructure, and security teams without direct authority.
• Hands-on experience with ITSM platforms (*, ServiceNow, Jira Service Management, Fresh-service).
• Working knowledge of the SAMA IT Governance Framework and related SAMA frameworks.
• Proven ability to work under pressure and meet short deadlines, such as audit and regulatory submissions.
• Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field.

Preferred Qualifications

• ITIL 4 Managing Professional or Strategic Leader certification.
• Certifications such as COBIT 2019, ISO/IEC 20000, or CGEIT.
• Experience within a SAMA-regulated institution.

Work Environment

This role offers a fully remote working arrangement. Availability during Saudi business hours (Sunday to Thursday) is required, with flexibility for urgent incidents or audit deadlines.