Digital GRC Section Head

About the role

The Digital GRC Section Head will lead IT governance, risk and compliance (GRC) across the organization’s digital platforms. This senior position ensures effective risk oversight, audit readiness, and alignment with regulatory requirements while embedding GRC frameworks into everyday IT processes.

Key responsibilities

• Establish, refine and enforce IT governance frameworks, policies and controls.
• Lead enterprise‑wide risk assessments, maintain a centralized risk register and prioritize remediation.
• Oversee compliance programs (ISO, NCA, GDPR) and ensure digital platforms are audit ready.
• Manage third‑party and vendor risk, embedding risk‑based clauses and monitoring compliance.
• Define and maintain GRC dashboards, reporting risk posture, audit findings and remediation timelines.
• Drive continuous improvement through benchmarking, maturity assessments and lessons learned.
• Support day‑to‑day monitoring of policy adherence and mentor the GRC team.

Required profile

• Minimum 6 years of experience in IT governance, risk or compliance.
• Bachelor’s degree in Engineering, Computer Science, Information Technology or equivalent.
• Proven ability to lead cross‑functional teams and embed GRC practices.

Required skills

• IT governance frameworks
• Risk assessment and vulnerability management
• Compliance standards (ISO, NCA, GDPR)
• Audit readiness and control testing
• Vendor risk assessment
• GRC dashboard creation and reporting