About the Job:
The company and its associated entities operate across fintech, digital platforms, gaming, fitness, communication, and related technology-enabled businesses. The group is committed to maintaining strong governance, risk management, regulatory compliance, information security, and operational resilience across its products and services.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
The Sr. IT GRC Analyst will support the implementation and ongoing management of the technology governance, risk, and compliance framework across the company and its associated entities, including regulated and non-regulated business units. The role will focus on technology risk management, regulatory compliance, audit coordination, certification maintenance, third-party risk management, IT control reviews, evidence management, and GRC reporting.
Close coordination is required with Technology, Cybersecurity, DevOps, Product, Compliance, Legal, Privacy, Finance, Operations, and business teams to ensure that technology and business processes remain aligned with internal policies, applicable regulatory requirements, and industry standards.
Key Responsibilities:
- Maintain and update technology risk registers, including risk identification, assessment, ownership, treatment actions, residual risk, and closure tracking.
- Support Risk and Control Self-Assessment activities and ensure timely reporting of control gaps, risk exposures, and remediation status.
- Monitor technology risk indicators and provide periodic updates to GRC management and relevant stakeholders.
- Ensure ongoing compliance with applicable standards and frameworks such as PCI DSS, ISO 27001, ISO 20000, UAE IA, NIST, COBIT, and ITIL.
- Connect with internal and external auditors, regulatory reviewers, and maintain accurate GRC documentation.
- Manage third-party risk and support cloud, application, infrastructure, data, AI, and integration risk assessments across group products and platforms.
- Utilize GRC tools and assist in preparing dashboards and reports for management, auditors, and internal stakeholders.
Skills and Attributes:
- Strong understanding of technology risk management, IT governance, information security, compliance, and audit practices.
- Familiarity with PCI DSS, ISO 27001, ISO 20000, NIST, COBIT, ITIL, UAE IA, and CBUAE technology risk expectations.
- Excellent documentation, reporting, coordination, and stakeholder management skills.
- Ability to independently work in a fast-paced environment with multiple priorities.
Qualifications:
- Bachelor’s degree in Information Technology, Computer Science, Information Security, Risk Management, or a related field.
- Minimum 7 years of experience in IT GRC, technology risk, information security, audit, compliance, or related functions.
- Experience in regulated environments such as financial services or fintech is preferred.
- Professional certifications like CISA, CISSP, CISM, CRISC, and others are advantageous.
Work Conditions:
On-site, Full-time
Location:
Abu Dhabi, Abu Dhabi Emirate, United Arab Emirates
Language Requirements:
None specified.
