Job Purpose
To develop, implement, and oversee IT governance frameworks, policies, and standards that ensure IT operations are aligned with business strategy, regulatory requirements, and international best practices. The role ensures effective governance of IT processes, compliance with IT policies, and continuous improvement of IT service delivery.
Key Responsibilities
IT Governance Frameworks
Develop, implement, and maintain IT governance frameworks (COBIT, ITIL, ISO 27001/20000).
Ensure IT processes are standardized, auditable, and aligned with corporate governance and business strategy.
Coordinate IT governance reviews and maturity assessments.
Policy Development & Compliance
Draft, update, and enforce IT policies, standards, and procedures (e.g., IT Security Policy, Data Management Policy, Change Management Policy).
Ensure compliance with CBK ICT Guidelines, Data Protection Act 2019, ISO standards, and other regulatory requirements.
Conduct periodic reviews of IT policies to reflect changes in technology and regulation.
Monitor adherence to IT policies across IT and business functions.
Risk & Audit Engagement
Support internal and external IT audits by providing governance and policy evidence.
Ensure audit recommendations relating to IT governance and policies are implemented.
Work with IT Risk, Compliance, and Audit to mitigate gaps in IT governance.
Change & Compliance Monitoring
Monitor compliance with IT change management processes to reduce risks and downtime.
Ensure proper documentation, approvals, and governance for IT projects and initiatives.
Establish governance mechanisms for IT procurement, vendor management, and system development.
Stakeholder Engagement
Act as liaison with business units, regulators, and auditors on IT governance and policy matters.
Provide training and awareness on IT policies to IT teams and business users.
Prepare reports for senior management and Board committees on IT governance posture.
Continuous Improvement
Benchmark IT governance practices against industry standards and recommend improvements.
Drive automation of IT policy compliance monitoring and reporting.
Promote a culture of accountability, compliance, and continuous service improvement.
Job Specification
Education
Bachelor's degree in Information Technology, Computer Science, or related field.
Master's degree in IT Governance, Risk, or Business Administration is an added advantage.
Professional certifications: COBIT, ITIL, ISO 27001 Lead Implementer/Auditor, CISA, CGEIT.
Work Experience
At least 7 years' IT experience with 3+ years in IT governance, risk, or compliance management.
Strong knowledge of CBK ICT Guidelines, Data Protection Act 2019, and global IT governance standards.
Key Skills & Competencies
Strong knowledge of IT governance frameworks and policies.
Excellent policy development and documentation skills.
Strong analytical and compliance monitoring capabilities.
Effective communication and stakeholder engagement skills.
Ability to balance IT governance requirements with business needs.
High integrity, accountability, and results orientation.