Governance, Risk, and Compliance Specialist

The Governance Risk and Compliance Specialist is a role focused on strengthening IT Audit technical documentation and knowledge management across the Groups critical IT environment.

The successful candidate will combine practical technical understanding with strong documentation and process discipline. Working closely with IT and relevant stakeholders they will develop clear & robust SOPs; validate documentation through practical use; identify gaps dependencies and control weaknesses; and help establish standards that remain effective beyond the initial engagement.

Six-Month Deliverables

• A prioritized inventory of IT systems processes procedures and existing documentation.
  
• Approved SOPs for agreed priority processes stored in the company-controlled knowledge base with named owners and review dates.
  
• Validation evidence confirming priority documentation can be followed by an appropriately skilled user without undocumented assistance.
  
• A completed register of documentation gaps continuity risks control issues owners actions and status.
  
• A completed handover package covering standards ownership review requirements outstanding actions and next steps.
  

Compliance Audit & Documentation

• Map and prioritize agreed critical IT systems processes procedures and existing documentation.
  
• Develop clear step-by-step SOPs runbooks process maps and supporting technical documentation for in-scope activities.
  
• Establish and apply documentation standards covering ownership version control review cycles approvals and change history.
  
• Maintain a central company-controlled knowledge base and ensure documentation remains current throughout the engagement.
  

Technical Validation & Knowledge Assurance

• Build sufficient working knowledge of relevant systems to understand and validate documented procedures through practical use.
  
• Test draft SOPs and runbooks by following the documented steps and confirming that they are complete accurate and workable.
  
• Identify missing steps assumptions dependencies access requirements and areas where critical knowledge remains undocumented.
  
• Troubleshoot technical issues where necessary to distinguish process or documentation gaps from underlying system issues.
  

Governance Risk & Controls

• Identify processes where critical knowledge access or decision-making is overly concentrated and recommend appropriate mitigation.
  
• Document access security change escalation recovery and other control-related procedures within the agreed scope.
  
• Highlight unclear ownership control weaknesses undocumented dependencies or governance gaps and track agreed remediation actions.
  
• Maintain a structured register of documentation gaps risks dependencies actions owners and status.
  
• Facilitate process and business unit walkthroughs to understand current practices validate alignment with policies and identify risk exposures and control gaps.
  

Process Improvement & Standardization

• Standardize recurring IT workflows and documentation formats where appropriate.
  
• Identify inefficient manual steps unclear hand-offs and recurring friction and recommend practical improvements.
  
• Ensure documentation and controls are updated and validated when approved system or process changes are implemented.
  
• Design documentation and governance practices that can be maintained effectively by internal teams.
  

Delivery & Stakeholder Coordination

• Deliver against an agreed six-month work plan with clear priorities milestones dependencies and acceptance criteria.
  
• Provide regular progress updates on documentation coverage validation status unresolved gaps and governance risks.
  
• Collaborate with the IT Manager and relevant process owners to gather technical input validate procedures and secure sign-off where appropriate.
  
• Complete a structured handover covering the knowledge base documentation standards ownership model review cadence and outstanding actions.
  

• Treats incomplete outdated or untested technical documentation as an operational and governance risk and addresses it proactively.
  
• Builds documentation from practical understanding and evidence rather than simply transcribing information provided by others.
  
• Tests documentation in practice identifies missing steps and constructively challenges unclear assumptions or dependencies.
  
• Works independently against agreed priorities and milestones while escalating material technical risks or blockers appropriately.
  
• Applies high standards of confidentiality access discipline and responsible handling of sensitive IT information.
  
• Creates maintainable documentation standards and knowledge structures rather than one-off documents.
  
• Establishes clear reusable documentation standards and knowledge structures with defined ownership and review requirements rather than creating one-off documents.
  

• 4-5 years experience in governance compliance operations systems administration technical documentation IT controls or a related role with demonstrable hands-on technical exposure.
  
• Proven experience developing and maintaining SOPs runbooks process maps knowledge bases or technical procedures based on firsthand understanding of the underlying process.
  
• Practical working knowledge of core IT environments including networking fundamentals device and endpoint management identity and access management and business productivity platforms.
  
• Ability to understand and operate technical systems sufficiently to validate documentation identify gaps and engage credibly with technical stakeholders.
  
• Experience delivering a defined project or work stream to agreed milestones while coordinating with multiple stakeholders in a structured process-driven environment.
  

• Formal governance audit or service-management certification such as ITIL COBIT ISO 27001 CompTIA Microsoft/Google CISA or similar.
  
• Experience independently building restructuring or administering a documentation system wiki or technical knowledge base using Notion Confluence SharePoint or similar.
  
• Exposure to governance compliance audit controls or regulated environments where documentation quality evidence and control effectiveness are important.
  
• Project coordination or project-management experience particularly within consulting contract multi-entity international or fast-scaling environments.