Digital GRC Section Head

Role Purpose

Governance and Risk

• Establish, refine, and enforce IT governance frameworks, policies, and controls across the enterprise technology landscape.
• Ensure governance practices align with standards, regulatory requirements, and industry best practices.
• Lead enterprise IT risk assessments and maintain a centralized risk register with ownership and remediation timelines.
• Prioritize vulnerabilities and risks based on business impact and coordinate remediation with architecture, infrastructure, and security functions.
• Drive a risk-aware culture across IT teams through awareness and practical guidelines.

Compliance and Audit

• Oversee ISO, NCA, GDPR, and other compliance frameworks and keep digital platforms audit ready.
• Lead control testing, gap assessments, remediation planning, and responses to internal and external audits.
• Maintain evidence repositories for efficient audit responses.

Third-Party Risk

• Lead assessments of vendor GRC maturity, embed risk-based clauses, and monitor compliance.
• Ensure vendors demonstrate compliance through SLAs, certifications, or independent audits.

Reporting and Improvement

• Define GRC dashboards covering risk posture, audit findings, remediation timelines, and compliance status.
• Provide structured updates to the Section Head and governance committees.
• Improve GRC practices through benchmarking, maturity assessments, and lessons learned.
• Monitor day-to-day activities for compliance with policies and procedures and identify process improvement opportunities.

People Management

• Participate in on-the-job training, mentoring, and coaching of subordinates.
• Provide direction, prioritize tasks, assign and delegate responsibility, and monitor workflow.
• Promote a high-performance working environment aligned with company values.

Qualifications and Requirements

• Minimum six years of experience in a related field or equivalent.
• Bachelor's degree in Engineering, Computer Science, Information Technology, or an equivalent qualification.
• Certifications in audit and assurance are preferred.
• Expertise in risk management, KPI-P, compliance, and internal control frameworks is preferred.