Manager, IT Governance & Policies at Rose Avenue Group

Job Responsibilities

IT Governance Frameworks

• Develop, implement, and maintain comprehensive IT governance frameworks (e.g., COBIT, ITIL, ISO 27001/20000).
• Standardize and document IT processes to ensure they are auditable and aligned with organizational goals.
• Coordinate IT governance maturity assessments and continuous improvement programs.

Policy Development & Compliance

• Draft, review, and enforce IT-related policies, standards, and procedures (including IT Security, Data Management, and Change Management Policies).
• Ensure compliance with relevant regulatory and statutory requirements such as CBK ICT Guidelines, the Data Protection Act 2019, and ISO standards.
• Conduct periodic policy reviews to address emerging risks, technological advancements, and regulatory changes.
• Monitor adherence to IT policies across departments and business units.

Risk & Audit Engagement

• Support both internal and external IT audits through documentation and evidence of governance and compliance.
• Coordinate the closure of audit findings related to IT governance and policies.
• Collaborate with IT Risk, Compliance, and Audit teams to identify and mitigate governance gaps.

Change & Compliance Monitoring

• Oversee adherence to IT change management processes to minimize risks and operational disruptions.
• Ensure governance mechanisms are in place for IT procurement, vendor management, and system development.
• Evaluate IT projects and initiatives to ensure proper governance documentation and approvals.

Stakeholder Engagement

• Serve as the primary liaison with business units, regulators, and auditors on IT governance and policy matters.
• Provide training and awareness programs to promote understanding and compliance with IT policies.
• Prepare periodic reports and presentations to senior management and Board committees on IT governance posture and performance.

Continuous Improvement

• Benchmark IT governance practices against industry standards and recommend enhancements.
• Drive automation of IT compliance monitoring and reporting processes.
• Foster a culture of accountability, compliance, and continuous service improvement within the IT function.

Other Requirements

Qualifications & Experience

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• A Master’s degree in IT Governance, Risk Management, or Business Administration is an added advantage.
• Professional certifications such as COBIT, ITIL, ISO 27001 Lead Implementer/Auditor, CISA, or CGEIT are highly desirable.
• Minimum of 7 years’ experience in IT, with at least 3 years in IT governance, risk, or compliance management.
• Strong understanding of CBK ICT Guidelines, the Data Protection Act (2019), and global IT governance frameworks.