Job Role Summary
The IT Governance Analyst is responsible for ensuring that IT processes and systems align with the organization's strategic objectives and comply with regulatory requirements. This role involves developing, implementing, and monitoring IT governance frameworks, policies, and procedures to enhance the efficiency, security, and effectiveness of IT operations.

Roles and Responsibilities

• Develop and maintain IT governance frameworks, policies, and procedures.
• Ensure compliance with regulatory requirements and industry standards.
• Conduct regular audits and assessments of IT processes and systems.
• Identify and mitigate risks associated with IT operations.
• Collaborate with IT and business stakeholders to align IT initiatives with business goals.
• Monitor and report on the effectiveness of IT governance practices.
• Provide guidance and support for IT governance-related issues.
• Stay updated on emerging trends and best practices in IT governance.
• Provide support to project & service management team.
• Create and update IT governance policies, procedures, and standards. Ensure alignment with organizational goals and regulatory requirements.
• Work out and implement the structure (framework) to ensure that IT investments support business objectives by applying international standards (i.e., COBIT, ITIL).
• Ensure that the IT processes are aligned with the internal and external regulations, policies and rules, ongoingly maintain them.
• Support IT leaders in client-facing engagements and act as an IT Ambassador in Governance & Compliance initiatives.
• Develop, maintain, evaluate, and implement policies and procedures in line with IT Governance initiatives.
• Support and ensure IT services are well aligning with records and information management guidelines.
• Provide awareness and share the updated understanding of information management and governance.
• Conduct regular audits and assessments to ensure compliance with industry standards and regulations.
• Participate in internal and external client audits as it relates to IT governance and compliance.
• Coordinate internal and external audits related to IT operation, coordinating remediation actions within IT.
• Work with other IT personnel to ensure awareness and alignment of ongoing client, industry, and best practice compliance obligations.
• Ensure that the IT systems are in line with relevant compliance, legal and ethical obligations that organization should have.
• Support and assign responsibility of control owners and coordinate with stakeholders for compliance audits.
• Identify, assess, and mitigate IT-related risks.
• Continuously identify, assess, measure and monitor information technology risk and mitigation opportunities by performing risk assessments. Consolidate and transparently communicate IT department risk to management.
• Identify opportunities to reduce risk and document remediation options regarding acceptance or mitigation. Work with Enterprise Risk Management team and maintain risk register for IT Department. Perform quarterly risk review exercise.
• Implement IT governance policies across the organization.
• Monitor adherence to policies and report on compliance status.
• Work with IT and business stakeholders to align IT initiatives with business objectives.
• Provide guidance on IT governance best practices.
• Analyze IT processes to identify controls and develop metrics & KPIs to measure process related performance and effectiveness of IT governance practices.
• Generate periodic reports on internal KPIs for management reporting.
• Work with strategy team and provide periodic update on balance scorecards.
• Assess various performance aspect of IT Department and identify areas of improvement.
• Stay updated on emerging trends and best practices in IT governance.
• Recommend and implement improvements to IT governance processes.
• Support the change management process by evaluating and approving changes.
• Ensure changes are implemented with minimal disruption to services.

Competences, Skills, Experience

• Proficiency in frameworks such as COBIT, ITIL, ISO 2000, ISO 27001 and ISO/IEC 38500.
• Knowledge of risk assessment and mitigation techniques.
• Experience with tools for risk management and compliance.
• Understanding of regulatory requirements and industry standards.
• Skills in conducting IT audits and assessments.
• Familiarity with audit tools and methodologies.
• Ability to develop, implement, and monitor IT policies and procedures.
• Experience with developing and tracking KPIs and metrics.
• Experience with project management methodologies (e.g., Agile, Scrum).
• Skills in managing IT projects and initiatives.
• Strong communication and interpersonal skills.
• Ability to work effectively with cross-functional teams.
• Ability to analyze complex information and identify key issues.
• Strong problem-solving skills.
• Meticulous in ensuring accuracy and thoroughness in work.
• Ability to spot errors and inconsistencies.
• Excellent verbal and written communication skills.
• Ability to convey technical information to non-technical stakeholders.
• Strong team player who works well with others.
• Ability to build and maintain effective working relationships.
• Flexibility to adapt to changing priorities and environments.
• Ability to manage multiple tasks and projects simultaneously.
• Proactive in identifying opportunities for improvement.
• Willingness to take on new challenges and responsibilities.
• High ethical standards and commitment to confidentiality.
• Trustworthiness in handling sensitive information.
• Commitment to providing excellent service to internal and external customers.
• Ability to understand and meet customer needs.
• Ability to lead and influence others, even without formal authority.
• Strong decision-making skills.
• Effective in managing time and meeting deadlines.
• Ability to prioritize tasks and manage workload efficiently.
• Commitment to ongoing professional development.
• Willingness to stay updated on industry trends and best practices.
• Ability to remain calm and composed under pressure.
• Persistence in overcoming challenges and setbacks.

Education, Academic Qualification, Certifications

• Bachelor’s Degree in relevant discipline.
• Professional Certification (CGEIT, ITIL Certification).
• Relevant certifications (e.g., CISA, CGEIT) are a plus.
• 10 years of IT experience in multiple IT disciplines.
• Minimum 5+ years of experience in IT Governance, Risk & Compliance Management.
• Proven experience in IT governance, risk management, or compliance.
• Strong understanding of IT governance frameworks (e.g., COBIT, ITIL).
• Ability to work independently and as part of a team.

Language and Other Selection Criteria

• Strong verbal and written communication skills.
• Ability to convey complex technical information to non-technical stakeholders.
• Strong interpersonal and collaboration skills.
• Ability to work independently and as part of a team.