Consultant - Governance & Compliance

Overview Job Description Job Title Consultant Job Code 716933 Grade I3 Group Legal, Compliance & Governance Division Department Governance & Compliance Unit ROLE PURPOSE The aim is to state the overall significance of the job from the organization’s perspective. To provide senior Governance, Risk and Compliance (GRC) expertise by developing, reviewing, and enhancing governance frameworks, compliance controls, risk assessments, policies, procedures, and executive reporting. The role supports the Governance & Compliance Department in ensuring organizational adherence to applicable regulations, internal policies, governance requirements, and best practices, while providing practical recommendations that strengthen control maturity, transparency, and decision-making across relevant business activities. Key Accountabilities & Activities This section describes the principal outputs required from the job. Key Accountabilities Key Activities GRC Advisory & Governance Support • Provide specialized advice on governance, risk, and compliance matters to support consistent and controlled business practices. • Interpret regulatory, internal policy, and governance requirements and translate them into practical controls and actions. • Support management in identifying governance gaps and recommending improvements aligned with organizational priorities. Governance Frameworks & Controls • Develop, review, and enhance governance frameworks, control models, procedures, and decision-making mechanisms. • Assess the effectiveness of existing governance practices and recommend improvements to strengthen accountability and oversight. • Coordinate with relevant stakeholders to ensure governance requirements are embedded within operational processes. Compliance Assessment & Monitoring • Conduct compliance reviews and monitoring activities to evaluate adherence to internal policies, applicable regulations, and approved procedures. • Identify compliance gaps, control weaknesses, and recurring observations requiring corrective actions. • Follow up on agreed actions and track closure status to support timely remediation and management visibility. Risk Identification & Mitigation • Support the identification, assessment, and documentation of governance and compliance risks across relevant activities. • Analyze potential risk impacts and propose mitigation actions, controls, or escalation paths as required. • Maintain clear risk records and provide updates on risk trends, exposures, and treatment progress. Policies, Procedures & Regulatory Alignment • Review and update policies, procedures, guidelines, and compliance documents to ensure alignment with regulatory and organizational requirements. • Coordinate policy and procedure reviews with relevant departments and ensure feedback is reflected accurately. • Support awareness and clarification of governance and compliance requirements to promote consistent application. Reporting, Dashboards & Management Insights • Prepare periodic GRC reports, dashboards, and executive summaries covering compliance status, risks, observations, and action plans. • Analyze governance and compliance data to identify trends, priorities, and matters requiring management attention. • Ensure reports are accurate, structured, and provide clear insights to support informed decision-making. Audit, Evidence & Remediation Coordination • Coordinate the collection and validation of evidence required for internal reviews, audits, regulatory requests, or compliance assessments. • Support the analysis of audit observations and translate findings into clear remediation plans and ownership structures. • Track remediation activities and escalate delays or unresolved matters to ensure effective closure. Stakeholder Engagement & Continuous Improvement • Engage with internal stakeholders to understand business needs, clarify GRC expectations, and support practical implementation of requirements. • Identify opportunities to improve governance practices, compliance monitoring, documentation quality, and reporting efficiency. • Contribute to building a culture of accountability, transparency, and continuous improvement across governance and compliance activities. Policies, Processes & Procedures • Follow all relevant departmental policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner. • Comply with all relevant safety, quality and environmental management policies, procedures and controls to ensure a healthy and safe work environment. Information Security • Comply with all relevant information security practices and standards to ensure data integrity and confidentiality. JOB SPECIFICATIONS Academic And Professional Qualifications • Bachelor’s degree in Law, Business Administration, Governance, Risk Management, Compliance, Internal Audit, Finance, or a related field. • Professional certifications in governance, risk, compliance, internal audit, or regulatory compliance are preferred, such as CGRC, CRISC, ISO 31000, ISO 37301, CIA, CISA, or equivalent. Years And Nature Of Experience • 5-7 years of relevant experience in governance, risk management, compliance, internal controls, regulatory compliance, audit coordination, or related GRC roles. VERSION TRACKING Prepared by: First review by: Approved by: Name Signature Date Show more Show less

Bachelor’s degree in Law, Business Administration, Governance, Risk Management, Compliance, Internal Audit, Finance, or a related field. Professional certifications in governance, risk, compliance, internal audit, or regulatory compliance are preferred, such as CGRC, CRISC, ISO 31000, ISO 37301, CIA, CISA, or equivalent. 5-7 years of relevant experience in governance, risk management, compliance, internal controls, regulatory compliance, audit coordination, or related GRC roles.

GRC Advisory & Governance Support: Provide specialized advice on governance, risk, and compliance matters to support consistent and controlled business practices; Interpret regulatory, internal policy, and governance requirements and translate them into practical controls and actions; Support management in identifying governance gaps and recommending improvements aligned with organizational priorities. Governance Frameworks & Controls: Develop, review, and enhance governance frameworks, control models, procedures, and decision-making mechanisms; Assess the effectiveness of existing governance practices and recommend improvements to strengthen accountability and oversight; Coordinate with relevant stakeholders to ensure governance requirements are embedded within operational processes. Compliance Assessment & Monitoring: Conduct compliance reviews and monitoring activities to evaluate adherence to internal policies, applicable regulations, and approved procedures; Identify compliance gaps, control weaknesses, and recurring observations requiring corrective actions; Follow up on agreed actions and track closure status to support timely remediation and management visibility. Risk Identification & Mitigation: Support the identification, assessment, and documentation of governance and compliance risks across relevant activities; Analyze potential risk impacts and propose mitigation actions, controls, or escalation paths as required; Maintain clear risk records and provide updates on risk trends, exposures, and treatment progress. Policies, Procedures & Regulatory Alignment: Review and update policies, procedures, guidelines, and compliance documents to ensure alignment with regulatory and organizational requirements; Coordinate policy and procedure reviews with relevant departments and ensure feedback is reflected accurately; Support awareness and clarification of governance and compliance requirements to promote consistent application. Reporting, Dashboards & Management Insights: Prepare periodic GRC reports, dashboards, and executive summaries covering compliance status, risks, observations, and action plans; Analyze governance and compliance data to identify trends, priorities, and matters requiring management attention; Ensure reports are accurate, structured, and provide clear insights to support informed decision-making. Audit, Evidence & Remediation Coordination: Coordinate the collection and validation of evidence required for internal reviews, audits, regulatory requests, or compliance assessments; Support the analysis of audit observations and translate findings into clear remediation plans and ownership structures; Track remediation activities and escalate delays or unresolved matters to ensure effective closure. Stakeholder Engagement & Continuous Improvement: Engage with internal stakeholders to understand business needs, clarify GRC expectations, and support practical implementation of requirements; Identify opportunities to improve governance practices, compliance monitoring, documentation quality, and reporting efficiency; Contribute to building a culture of accountability, transparency, and continuous improvement across governance and compliance activities.