Digital & Technology GRC Manager

About the role

The Digital & Technology GRC Manager is responsible for building and sustaining trust in Aramex’s technology risk and control environment. This role leads global audit engagements, drives remediation of findings, and enhances risk‑control maturity across the D&T function.

Key responsibilities

• Lead global technology, ITGC and cybersecurity audit engagements with internal, statutory and Big 4 auditors.
• Own the end‑to‑end remediation lifecycle for audit findings, from root‑cause analysis to validated closure.
• Develop and maintain audit calendars, coordinate evidence gathering and manage fieldwork logistics across multiple regions.
• Provide senior leadership and the Board with decision‑ready GRC reporting on audit status, remediation progress and residual risk.
• Drive improvements in GRC tooling, audit methodologies and stakeholder capability.

Required profile

• Bachelor’s degree in Computer Science, Information Technology or related field.
• 10‑12 years of IT experience with 6‑8 years leading technology audit, ITGC assurance or GRC in a global organization.
• Proven experience managing statutory and internal audit engagements, preferably with Big 4 exposure.
• Fluency in Arabic and English (written and spoken).

Required skills

• CISA (required) and/or CISM, CISSP, CCSP certifications.
• ISO 27001:2022 Lead Auditor (LA/LI) certification.
• Deep knowledge of SAP Basis security, role‑based access and Segregation of Duties.
• Strong command of IT governance frameworks such as COBIT and ITIL.
• Experience with SOC 2 Type II compliance, cloud security and AI governance frameworks.