Governance, Risk and Compliance Officer

Role

• Assess the effectiveness, efficiency and security of IT systems, monitor compliance with professional standards and internal procedures, and report to management on risks and mitigation.

Information security and business continuity

• Develop, review, monitor and implement the information security management system, including policies, systems and procedures. Improve it as regulations and industry practices change.
• Develop and review business-continuity and disaster-recovery plans, identify risk areas and ensure mitigation measures are taken.

Audit and compliance

• Investigate procedural and regulatory breaches, including engineering and operations, and report findings with effective corrective plans.
• Create the internal audit plan and schedule around management needs; conduct regular audits and assessments, and prepare findings, recommendations and corrective actions.
• Monitor compliance concerns, including data breaches, security incidents and regulatory changes, take appropriate action and communicate issues to leadership and the board.
• Guide and train employees on security and compliance standards, helping them understand their responsibilities.
• Coordinate with external auditors and regulators to demonstrate legal and regulatory compliance.

Risk management and coordination

• Integrate compliance and ISMS requirements into software development, project management and operations with cross-functional teams.
• Move, manage and improve GRC tasks through a recognized specialist tool.
• Conduct enterprise-wide risk assessments under defined policy and procedures, working with departments to identify and mitigate risks.
• Review new tools and software against company direction and policies, and identify necessary changes to procedures and internal controls.
• Understand customer agreements with third parties and assess acceptance of security-related risks; perform vendor and customer risk assessments.
• Review internal workflows and identify improvements.

Qualifications and experience

• A bachelor's degree in computer science or a related field, with at least one to two years in governance, compliance, IT audit or IT risk management.
• Strong knowledge of IT audit principles, practices and frameworks, such as GRCP, COBIT, ISO 27001 or related disciplines.
• Familiarity with security and compliance requirements including ISO 27001, GDPR and PA-DSS, and Middle Eastern cybersecurity and compliance regulations, including Jordan, the UAE, Oman, Kuwait and Qatar.
• Proficiency in risk and audit tools and methodologies, and exposure to IT governance activities.

Skills and performance measures

• Analytical and critical thinking, problem solving and insights that support informed decisions, with excellent reporting and presentation skills.
• Independent work and teamwork, multitasking, attention to detail and reliable delivery against deadlines.
• Monitor employee adherence to procedures and technology controls, present to senior management and provide timely, regular progress and achievement reports.

Location and application

• On-site in Amman, Jordan. Apply through ProgressSoft’s official application form with a resume and the requested information.