GM-Governance, Audit & Compliance

Job Title:

Lead - Governance & Compliance

Job Code:

22001356

Designation:

GM-Governance & Compliance

Band:

M3

Function:

Technology

Sub-Function:

Central Operations Group

Reports To:

Head – Opex, Governance, Audit & Compliance

No. of Direct Reports

1

Location Type:

COR

No. of Direct + Indirect Reports

1

Job Purpose

The role is responsible for strengthening compliance, financial governance, risk management and business continuity across the Network function. It ensures adherence to ICFR, Segregation of Duties and Information Security controls for applicable network applications, while coordinating audit requirements and remediation of control deviations. The role also governs the Network Risk Register, BCP and disaster recovery coordination, regulatory reporting, infrastructure risk budgeting, and development of a compliant and capable team.

Key Responsibilities

• Ensure ICFR, SoD and IS Policy Compliance: Drive compliance with ICFR, SoD and Information Security requirements across applicable network applications. Ensure controls are implemented, monitored and aligned with defined policies and governance frameworks.
• Manage Audit Readiness and Compliance Remediation: Coordinate internal and external audits, ensure timely availability of compliance artefacts, and oversee closure of audit observations, control gaps, non-compliances and approved deviations.
• Strengthen Application Governance and Control Monitoring: Oversee compliance of existing and newly deployed applications with control requirements, including audit-log governance, access controls and compliance monitoring mechanisms.
• Govern Network Risk Management: Maintain the Network Risk Register, facilitate periodic risk reviews and monitor mitigation actions across domains. Highlight significant operational, financial and compliance risks to management.
• Drive Governance and Management Reporting: Track closure of governance actions arising from management forums and vendor reviews, and provide timely reporting and insights to support decision-making and risk oversight.
• Align MTX Infrastructure Risk and Budget Requirements: Analyze MTX Infrastructure Risk across the network footprint and identify discrepancies between Circle requirements and Infrastructure Planning assessments. Facilitate alignment on infrastructure risks, mitigation priorities and associated budget requirements for inclusion in the Network Risk Register.
• Lead Business Continuity and Disaster Recovery Governance: Manage the Business Continuity Planning framework and coordinate cross-functional preparedness and recovery governance during business disruption events, including regulatory and management reporting.

Managerial

• Promote HSW compliance and foster a culture of governance, accountability and continuous learning through coaching, mentoring and capability development initiatives.

Technical/ Functional Competencies

• Network Compliance Management
• Internal Control Governance
• Network Risk Management
• Business Continuity Planning
• Audit and Remediation

Behavioural  & Leadership Competencies

• Stakeholder Management
• Analytical Decision-Making
• Governance Orientation
• Cross-Functional Collaboration
• Risk-Based Judgement

Qualifications & Experience

Minimum Education Qualification:

Bachelor’s degree in engineering, Telecommunications, Business Administration or a related discipline.

A professional qualification or certification in risk management, internal controls, audit, information security or business continuity would be advantageous.

Years of working experience:

10–12 years of relevant experience in telecommunications, network governance, compliance, financial controls, risk management, business continuity or a related function.

Experience in internal and external audits, application control compliance, risk registers and cross-functional governance.

Working Relationship

Internal Stakeholders

• Network Leadership and Management
• Central Network and Domain Heads
• Circle Network Teams
• Finance Teams
• Internal Audit and Information Security Teams

External Stakeholders

• External Auditors
• Network and Technology Vendors
• Application and Technology Partners
• Regulatory Authorities, including DOT