IT Compliance Lead

Strategic Leadership & Governance Lead information security compliance within RayaCX organization including all sites and divisions. Lead the implementation, acquiring and certification readiness, and maintenance of ISO/IEC 27001. Ensure ongoing compliance with PCI DSS, GDPR, NIST and SOC 2 and other information security frameworks and requirements. Work closely with IT, Security, Operations, and other teams to ensure controls are implemented effectively. Drive governance, risk management, and compliance (GRC) initiatives across RCX. Audit and enforce IT compliance policies, procedures, and control frameworks. Support training programs related to information security, compliance, and resilience. Develop compliance dashboards, KPIs, and management reports. Govern the design, implementation, and maintenance of IT Disaster Recovery Plans (DRPs). Develop and maintain IT-related Business Continuity Plans (BCPs). Work with IT information cybersecurity department closely on client's requirements. Coordinate and lead BCP, risk assessments and DR testing exercises, documenting results and tracking improvements. Reduced IT risks and improved control effectiveness. IT Compliance processes documentation. Risk & Control Management Auditing IT risk assessments and compliance gap analyses across systems, infrastructure, and processes. Define and implement control measures to mitigate identified risks and compliance gaps. Ensure no risk or audit finding is closed without proper evidence, ownership, and validation. Audit & Compliance Governance Plan, lead and execute internal audits, external audits, and certification audits . Act as the main focal point for IT compliance during client and regulatory audits. Track audit findings, define corrective actions, and ensure timely remediation. Develop, maintain, and enforce policies, procedures, and standards across the organization. Auditing all IT related processes (end-to-end process audit) TECHNICAL SKILLS Strong understanding of regulatory requirements, risk management frameworks, and industry best practices. Strong audit performance with minimal findings. PROFESSIONAL EXPERIENCE Minimum 10 years of experience in IT compliance, information security, and risk management. ISO 27001 Lead Auditor.