As the IT Compliance & Governance Officer at Avrioc Technologies, you will play a crucial role in ensuring governance and oversight across Technology functions, including IT, Cybersecurity, and Cloud Operations (AWS). Your responsibilities will include:
-
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Technology Governance and Risk Management:
- Provide governance and oversight to ensure the confidentiality, integrity, and availability of systems and data.
- Build and maintain IT governance frameworks aligned with COBIT and ITIL.
- Develop and review technology policies related to cybersecurity, cloud governance, incident management, privacy, and business continuity.
- Conduct technology risk assessments for new products, services, and third parties in alignment with CBUAE Technology Risk guidelines.
- Drive technology governance programs to ensure regulatory and audit readiness.
- Collaborate with Product Managers to enforce secure SDLC practices and privacy by design principles.
- Advise the business on emerging security and compliance risks, ensuring effective controls are in place.
- Review and respond to security questionnaires and regulatory inquiries related to information security and data privacy.
-
Regulatory Compliance and Fintech Oversight:
- Ensure compliance with CBUAE Technology Risk Regulations, global standards like ISO 27001, ISO 20000, PCI DSS, and UAE IA.
- Manage internal and external audits, certification processes, and regulatory inspections.
- Act as the main contact for auditors and regulators on technology and cybersecurity matters, leading post-audit remediation efforts.
-
Cybersecurity Oversight:
- Collaborate with the Head of Cybersecurity to implement and improve cybersecurity frameworks.
- Oversee information security risk management, including penetration testing and vulnerability assessments.
-
Data Privacy and Protection:
- Ensure compliance with data privacy regulations for products and third-party engagements and maintain breach response plans.
-
Collaboration and Stakeholder Management:
- Provide strategic advice to the CEO and senior leadership on governance and regulatory changes.
- Present updates during Audit, Risk, and Compliance Committee meetings.
- Promote a culture of ethical data use and responsible risk management throughout the organization.
- Develop and deliver training programs on compliance, risk, and data privacy for employees.
Qualifications:
- Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or related fields.
- 13+ years of progressive experience in technology governance, audits, cybersecurity compliance, and data privacy within fintech, banking, or regulated sectors.
- Strong knowledge of CBUAE SVF and RPSC regulations.
- Proven experience in managing ISO 27001, ISO 20000, PCI DSS, and UAE IA certifications and audits.
- Hands-on experience with data privacy programs and compliance (e.g., GDPR, UAE Data Protection Law).
- Deep understanding of technology risk management and cybersecurity best practices.
- Must hold one or more certifications: CISSP, CISM, CRISC, CGEIT, or COBIT.
- Proven track record in team leadership, mentoring, and KPI-driven performance management.
- Excellent analytical, problem-solving, and communication skills.
