IT Risk Management & Compliance Specialist

📍 Abu Dhabi, UAE📅 12-Month Contract (Potential for Extension)💼 Contract OpportunityAbout the RoleWe are seeking an experienced IT Risk Management & Compliance Specialist to support a major enterprise organisation in strengthening its technology risk management, governance, and compliance capabilities.This role will play a key part in improving visibility of technology risks, driving risk remediation activities, supporting audit and compliance initiatives, and enhancing overall governance across the IT landscape.The successful candidate will work closely with IT, Cybersecurity, Internal Audit, Compliance, and business stakeholders to ensure effective risk management practices are embedded across the organisation.Key ResponsibilitiesMaintain and manage IT risk registers, control inventories, remediation trackers, and compliance evidence repositories.Conduct and support IT risk assessments across infrastructure, cloud platforms, applications, identity and access management, and third-party services.Monitor risk treatment plans, overdue actions, control deficiencies, and remediation progress.Partner with technology, cybersecurity, audit, and compliance teams to address findings and strengthen control effectiveness.Prepare executive-level reports, dashboards, risk summaries, and governance updates.Support internal and external audits by coordinating evidence collection, validating responses, and tracking remediation activities.Assist with the implementation and alignment of IT controls against recognised frameworks and regulatory requirements.Identify control weaknesses, recurring issues, and opportunities to improve governance, risk, and compliance processes.Contribute to the ongoing maturity and effectiveness of the organisation's IT risk management framework.Required Experience5+ years of experience in IT Risk Management, Technology Governance, Compliance, Internal Audit, Cybersecurity Governance, or Technology Assurance.Strong understanding of IT controls, risk assessment methodologies, audit processes, and compliance reporting.Experience supporting risk and compliance programmes within complex enterprise environments.Knowledge of technology risk across cloud, infrastructure, applications, identity management, and third-party risk domains.Ability to engage effectively with both technical and non-technical stakeholders.Preferred ExperienceExperience working within regulated industries such as Financial Services, Government, Energy, Utilities, Telecommunications, or Critical Infrastructure.Familiarity with one or more industry frameworks, including:ISO 27001NIST Cybersecurity Framework (CSF)COBITITILExperience supporting regulatory reviews, compliance assessments, or technology audits.Relevant certifications such as CRISC, CISA, CISSP, ISO 27001 Lead Implementer/Auditor, or similar are highly desirable