Develop, implement, and maintain the IT governance framework in alignment with business strategy, organizational goals, and regulatory requirements.
Ensure compliance with CBI regulations and continuously monitor regulatory changes impacting IT governance practices.
Align and maintain IT policies, procedures, and controls with recognized industry frameworks such as COBIT, ISO 27001, ISO 22301, PCI DSS, and NIST CSF.
Lead IT governance risk assessments, identify control gaps, and track remediation efforts to strengthen the organization’s governance maturity.
Support and coordinate internal and external audits by preparing documentation, facilitating reviews, and ensuring timely resolution of findings related to IT governance.
Collaborate with stakeholders across IT, Risk, Compliance, Legal, and Business units to promote a culture of accountability and governance excellence.
Monitor and report on IT governance performance metrics and KPIs related to compliance, risk, and control effectiveness.
Provide governance oversight on IT initiatives and projects by conducting compliance reviews, supporting risk assessments, and ensuring alignment with governance requirements throughout the project lifecycle.
Facilitate the ongoing review and enhancement of IT governance policies, procedures, and standards in line with regulatory expectations and organizational priorities.
Contribute to the development and execution of the IT governance roadmap, supporting efforts to improve governance maturity across the enterprise.
Bachelor’s degree in computer science, Information Technology, or a related field.
5+ years of experience in IT Governance, IT Compliance, or IT Risk Management.
Practical experience with auditing processes, compliance tools, and IT control assessments.
Familiarity with CBI regulatory requirements is essential; experience with international standards such as ISO 27001, ISO 22301, PCI DSS, or NIST CSF, and governance frameworks like COBIT or ITIL are preferred.
Professional certifications such as ISO 27001 Lead Auditor/Implementer, COBIT, CISA, CRISC, or other ISACA certifications are preferred.
This role is based at Zain Cash headquarters in Baghdad and requires full-time on-site presence.