Department Manager - Governance, Risk & Compliance (Lotus Nawamin Office)

Understand and interpret requirements across relevant IT Risk, Cybersecurity, Regulatory and map requirements against the organization's technology and security policies, standards and control Develop, establish, maintain, and continuously improve the organization's Information Security Policies, Standards and Guidelines ensuring alignment with business requirements, regulatory obligations, and industry best practices. Conduct Technology Risk Assessments across applications, infrastructure, products, projects, and operations. Identify risks and control gaps, recommend appropriate remediation or mitigating controls, and track risks through closure or formal risk acceptance. Manage the Risk Acceptance process, ensuring exceptions have appropriate business justification, compensating controls, accountable risk owners, defined expiry dates, and periodic review. Coordinate with internal audit, external audit and other stakeholders to support audit and assessment, provide the information as audit request and regular report status to IT and Security management. Define and monitor Security KPIs, KRIs, compliance metrics, and management dashboards to measure control effectiveness, risk exposure, remediation progress, and overall security governance maturity. Perform other related duties as assigned