IT Governance

Job Description

Role Purpose:

Tamheer trainee will help and support the team with basic tasks related to IT standards, policies, and compliance. The role includes supporting activities linked to the SAMA Cybersecurity Framework, NDMO‑PDPL, and NCA guidelines. The trainee will also assist in documenting processes, supporting IT audits, helping with risk management, and contributing to business continuity and disaster recovery activities. This role is designed to give the trainee hands‑on experience in different IT governance areas while learning and developing practical skills.

Key Accountabilities:

1- IT Governance Standards, Frameworks and Guidelines;

• Assist in developing and maintaining basic IT governance standards and guidelines.
• Support the team in improving IT governance practices and aligning them with business needs.
• Help create, organize, and review technical documentation to ensure quality and consistency.
• Prepare and share simple status updates with management and stakeholders.
• Assist in managing the IT documentation process across different IT functions.

2- SAMA Cyber Security Framework , NDMO-PDPL and NCA Guidelines;

• Support the team in following and implementing SAMA CSFW, NDMO, and NCA guidelines to help keep IT systems secure and reliable.
• Assist in improving the organization's compliance and maturity levels related to these regulations.
• Help monitor controls, check their performance, and report any issues or gaps to management.

3- Business Process, IT Policies, Procedures and Documentation Management;

• Help improve IT processes and keep their documents updated.
• Assist in creating, reviewing, and organizing IT policies and procedures.
• Check that processes and policies are being followed and are compliant.
• Prepare simple reports on improvements, issues, and updates.

4- IT Audit Management;

• Help carry out IT audit activities by checking controls, identifying gaps, and supporting audit plans.
• Assist in managing audit findings by tracking responses and ensuring timely follow up.
• Work with internal and external auditors to support the audit process.
• Coordinate with teams to ensure audit recommendations are implemented and prepare simple audit status updates for management.

5- Risk Management;

• Help collect and share required IT risk data for quarterly and annual regulatory reporting.
• Assist in maintaining Key Risk Indicators (KRIs) and updating IT risk metrics with the relevant teams.
• Support in creating and updating risk registers for IT and technology related risks.
• Work with risk management and cyber security teams to identify and track IT risks and help follow up on mitigation actions.

6- Technology Business Continuity and Disaster Recovery Management;

• Help maintain and update IT business continuity and disaster recovery plans.
• Assist in conducting tests and exercises, and report results to the team.
• Support efforts to keep critical IT services running during disruptions and help restore systems afterwards.
• Follow relevant BCM and disaster recovery standards and guidelines.

Skills

Technical Skills:

• Basic understanding of IT systems and security.
• Ability to work with documents, reports, and spreadsheets.
• Basic knowledge of IT policies, processes, and risk concepts.
• Willingness to learn IT standards (SAMA, NCA, NDMO, ISO, etc.).

Soft Skills:

• Good communication and teamwork.
• Attention to detail.
• Ability to organize tasks and manage time.
• Problem solving and willingness to learn new things.

Education

Bachelor's degree in Information Technology or related field.