IT GRC Officer

Main Purpose: Lead IT Governance, Risk & Compliance (GRC) activities and manage IT/Fintech projects while ensuring compliance with CBUAE regulations, ISO 27001, UAE PDPL, and AML/CFT requirements. Key Responsibilities:Maintain IT policies, risk registers, audits, compliance evidence, and regulatory reporting. Manage end-to-end IT and Fintech projects (planning, budgeting, risks, reporting, governance).Support security operations, vulnerability assessments, patch management, and audit readiness. Assist with Business Continuity and Disaster Recovery planning and testing. Required Experience:Bachelor's degree in IT, Cybersecurity, Computer Science, or related field. 3 to 5 years' experience in IT GRC and/or IT Project Management. Mandatory experience in a UAE Exchange House, Money Services Business, or regulated financial institution with exposure to CBUAE requirements.Preferred Certifications:PMP, PRINCE2, CAPM, CISA, CRISC, CISM, ISO 27001 Lead Auditor/Implementer, COBIT Foundation.Key Skills:IT Governance & Risk ManagementRegulatory Compliance & AuditsISO 27001, PDPL, AML/CFT ControlsProject Management (PMO)Stakeholder & Vendor ManagementMS 365, SharePoint, Power Automate, Risk Registers, RAID LogsReporting Line: Reports to the CTO and works closely with Information Security, Data Protection, Compliance, Risk, and Internal Audit teams. Success Measures (KPIs):Timely audit closureUpdated risk reportingSuccessful project deliveryCompliance readinessSecurity and patch-management compliance