Technology Governance and Controls Officer

Job Title: Technology Governance and Controls Officer

Location: City of London 

Department: Information Technology / Compliance

Job Summary:

The Technology Governance and Controls Officer will be responsible for overseeing the governance framework and control processes related to the integration and upgrade of business technology systems. This role ensures that all technology initiatives are compliant with internal policies and external regulations, maintaining the integrity, security, and efficiency of the company’s IT infrastructure.

Key Responsibilities:

1. Governance Framework Development and Maintenance:

   • Develop, implement, and maintain technology governance frameworks to support the organization's strategic objectives.
   • Ensure alignment of IT governance with overall business governance and compliance frameworks.

2. Compliance and Regulatory Oversight:

   • Monitor compliance with internal policies, standards, and procedures as well as external regulations (e.g., GDPR, HIPAA, SOX).
   • Conduct regular audits and assessments to ensure IT compliance and manage remediation efforts for any identified gaps.

3. Risk Management:

   • Identify, assess, and mitigate risks associated with technology upgrades and integrations.
   • Develop and implement risk management strategies, including contingency plans and incident response protocols.

4. Policy and Procedure Development:

   • Develop and update IT policies and procedures to ensure they reflect current regulations and best practices.
   • Ensure that policies and procedures are effectively communicated and enforced across the organization.

5. Stakeholder Collaboration:

   • Work closely with IT, legal, compliance, and business units to ensure cohesive implementation of governance and control measures.
   • Serve as a liaison between IT and other departments to facilitate seamless technology integration and upgrade processes.

6. Technology Integration and Upgrades:

   • Oversee the planning and execution of technology integration and upgrade projects, ensuring they meet compliance and governance standards.
   • Evaluate new technologies for compliance risks and governance requirements before implementation.

7. Training and Awareness:

   • Develop and conduct training programs for staff on IT governance, compliance, and controls.
   • Promote awareness of governance and compliance requirements throughout the organization.

8. Reporting and Documentation:

   • Prepare and present regular reports on IT governance and compliance status to senior management and regulatory bodies.
   • Maintain thorough documentation of governance frameworks, control processes, and compliance activities.

Qualifications:

• Bachelor’s degree in Information Technology, Computer Science, Business Administration, or a related field. A Master’s degree is preferred.
• Professional certifications such as CISA, CISM, CISSP, or CGEIT are highly desirable.
• Proven experience in IT governance, risk management, and compliance within a complex business environment.
• Strong knowledge of regulatory requirements and industry standards (e.g., ISO 27001, NIST).
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills, with the ability to interact effectively with stakeholders at all levels.
• Project management experience with a track record of successfully managing technology integration and upgrade projects.
• High ethical standards and integrity in professional conduct.