Governance, Risk, and Compliance Specialist

The Governance, Risk, and Compliance Specialist is a role focused on strengthening IT Audit, technical documentation, and knowledge management across the Group's critical IT environment.

The successful candidate will combine practical technical understanding with strong documentation and process discipline. Working closely with IT and relevant stakeholders, they will develop clear & robust SOPs; validate documentation through practical use; identify gaps, dependencies, and control weaknesses; and help establish standards that remain effective beyond the initial engagement. 

Requirements

Six-Month Deliverables

• A prioritized inventory of IT systems, processes, procedures, and existing documentation.
  
• Approved SOPs for agreed priority processes, stored in the company-controlled knowledge base with named owners and review dates.
  
• Validation evidence confirming priority documentation can be followed by an appropriately skilled user without undocumented assistance.
  
• A completed register of documentation gaps, continuity risks, control issues, owners, actions, and status.
  
• A completed handover package covering standards, ownership, review requirements, outstanding actions, and next steps.
  

Compliance, Audit & Documentation

• Map and prioritize agreed critical IT systems, processes, procedures, and existing documentation.
  
• Develop clear, step-by-step SOPs, runbooks, process maps, and supporting technical documentation for in-scope activities.
  
• Establish and apply documentation standards covering ownership, version control, review cycles, approvals, and change history.
  
• Maintain a central, company-controlled knowledge base and ensure documentation remains current throughout the engagement.
  

Technical Validation & Knowledge Assurance

• Build sufficient working knowledge of relevant systems to understand and validate documented procedures through practical use.
  
• Test draft SOPs and runbooks by following the documented steps and confirming that they are complete, accurate, and workable.
  
• Identify missing steps, assumptions, dependencies, access requirements, and areas where critical knowledge remains undocumented.
  
• Troubleshoot technical issues where necessary to distinguish process or documentation gaps from underlying system issues.
  

Governance, Risk & Controls

• Identify processes where critical knowledge, access, or decision-making is overly concentrated and recommend appropriate mitigation.
  
• Document access, security, change, escalation, recovery, and other control-related procedures within the agreed scope.
  
• Highlight unclear ownership, control weaknesses, undocumented dependencies, or governance gaps and track agreed remediation actions.
  
• Maintain a structured register of documentation gaps, risks, dependencies, actions, owners, and status.
  
• Facilitate process and business unit walkthroughs to understand current practices, validate alignment with policies, and identify risk exposures and control gaps.
  

 Process Improvement & Standardization

• Standardize recurring IT workflows and documentation formats where appropriate.
  
• Identify inefficient manual steps, unclear hand-offs, and recurring friction, and recommend practical improvements.
  
• Ensure documentation and controls are updated and validated when approved system or process changes are implemented.
  
• Design documentation and governance practices that can be maintained effectively by internal teams.
  

Delivery & Stakeholder Coordination

• Deliver against an agreed six-month work plan with clear priorities, milestones, dependencies, and acceptance criteria.
  
• Provide regular progress updates on documentation coverage, validation status, unresolved gaps, and governance risks.
  
• Collaborate with the IT Manager and relevant process owners to gather technical input, validate procedures, and secure sign-off where appropriate.
  
• Complete a structured handover covering the knowledge base, documentation standards, ownership model, review cadence, and outstanding actions.
  

• Treats incomplete, outdated, or untested technical documentation as an operational and governance risk and addresses it proactively.
  
• Builds documentation from practical understanding and evidence rather than simply transcribing information provided by others.
  
• Tests documentation in practice, identifies missing steps, and constructively challenges unclear assumptions or dependencies.
  
• Works independently against agreed priorities and milestones while escalating material technical risks or blockers appropriately.
  
• Applies high standards of confidentiality, access discipline, and responsible handling of sensitive IT information.
  
• Creates maintainable documentation standards and knowledge structures rather than one-off documents.
  
• Establishes clear, reusable documentation standards and knowledge structures, with defined ownership and review requirements, rather than creating one-off documents.
  

• 4-5 years experience in governance, compliance, operations, systems administration, technical documentation, IT controls, or a related role with demonstrable hands-on technical exposure.
  
• Proven experience developing and maintaining SOPs, runbooks, process maps, knowledge bases, or technical procedures based on firsthand understanding of the underlying process.
  
• Practical working knowledge of core IT environments, including networking fundamentals, device and endpoint management, identity and access management, and business productivity platforms.
  
• Ability to understand and operate technical systems sufficiently to validate documentation, identify gaps, and engage credibly with technical stakeholders.
  
• Experience delivering a defined project or work stream to agreed milestones while coordinating with multiple stakeholders in a structured, process-driven environment.
  

• Formal  governance, audit, or service-management certification such as ITIL, COBIT, ISO 27001, CompTIA, Microsoft/Google, CISA, or similar.
  
• Experience independently building, restructuring, or administering a documentation system, wiki, or technical knowledge base using Notion, Confluence, SharePoint, or similar.
  
• Exposure to governance, compliance, audit, controls, or regulated environments where documentation quality, evidence, and control effectiveness are important.
  
• Project coordination or project-management experience, particularly within consulting, contract, multi-entity, international, or fast-scaling environments.
  

Benefits