Governance, Risk and Compliance Officer
No salary listed
Junior
Bachelor's
Amman, Jordan
In Person
Risk & ComplianceInternal Audit & Controls, Regulatory Compliance & Ethics
About the job
Requirements
- A bachelor's degree in computer science or any related field is required.
- At least 1–2 years of experience in governance, compliance, IT auditing, or information technology risk management is required.
- Strong knowledge of IT auditing principles, practices, and frameworks such as GRCP, COBIT, ISO 27001, or related disciplines is required.
- Familiarity with security frameworks and compliance requirements such as ISO 27001, GDPR, and PA-DSS is required.
- Familiarity with cybersecurity and compliance regulations across Middle East countries, including Jordan, UAE, Oman, Kuwait, and Qatar, is required.
- Proficiency in risk and audit tools and methodologies is required.
- The candidate must provide insights for informed decision-making.
- The candidate must have analytical, critical-thinking, and problem-solving skills.
- The candidate must have reporting and presentation skills.
- Exposure to IT governance and its activities is required.
- The candidate must be able to work independently and as part of a team.
- The candidate must be able to multitask, pay attention to detail, and meet deadlines.
- The candidate must be able to read and understand third-party client agreements and assess risk acceptance relating to security terms and conditions.
- The candidate must be able to perform third-party risk assessments for vendors and clients.
Responsibilities
- Develop, review, monitor, and implement the company's information security management system, including processes, policies, systems, and procedures, and continuously improve the ISMS to keep pace with regulatory requirements and industry best practices.
- Develop, review, and monitor the firm's business continuity and disaster recovery plan, identify potential risk areas, and ensure mitigation steps are taken.
- Investigate and report violations of processes, procedures, and regulatory standards across the firm's operations, including engineering and operations, and develop effective action plans in response to findings and compliance violations.
- Build an internal audit plan and schedule to cover areas required by management.
- Prepare internal audit reports detailing findings, recommendations, and corrective actions.
- Plan and conduct regular audits and assessments to identify non-compliance and develop corrective action plans.
- Monitor and report compliance issues, including data breaches, security incidents, and regulatory changes, and take appropriate action to address them.
- Communicate compliance-related issues effectively to the leadership team and board of directors.
- Provide employees with guidance and training on security and compliance topics based on best practices and industry standards.
- Foster an organizational culture in which employees understand compliance and their role in maintaining it.
- Liaise with external auditors and regulators as needed to demonstrate compliance with relevant laws and regulations.
- Collaborate with cross-functional teams to integrate compliance and ISMS requirements into software development, project management, and operations.
- Migrate and manage GRC tasks using a recognized GRC tool.
- Perform and manage an enterprise risk assessment across the organization based on defined risk-management policies and procedures.
- Work with all departments on risk-management tasks, including identifying and mitigating risks.
- Review new tools and software used by departments to ensure alignment with company policies and identify necessary changes to processes and internal controls.
- Understand internal workflows and procedures and assess areas for improvement.
- Ensure staff members comply with established processes and procedures.
- Present to top management as required.
- Ensure staff members comply with technology requirements at all levels.
- Submit regular, timely reports to management on progress and achievements.
About the company
ProgressSoft provides a broad suite of financial and payment software and services to banks and other financial institutions. Its products help banks process payments, manage financial transactions, and support related financial workflows through an integrated software portfolio that evolves over time. The company distinguishes itself by serving as a long-term technology partner to more than 380 financial institutions worldwide, with a track record dating back to 1989 and a focus on expanding and updating its offerings. Its goal is to help financial institutions run modern, efficient payment and financial operations by delivering a continuously growing set of solutions and services.
Company Size
501-1,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Al Jizah, Jordan
Founded
1989
Get referred to ProgressSoft
See people who can refer or advise you
Simplify's Take
What believers are saying
- BEAC's SYSTAC 2 rollout keeps ProgressSoft embedded in regional payment modernization through 2027.
- Housing Bank expanded its long partnership in May 2026 with ProgressSoft Payments Hub Platform.
- Ethiopia, Malaysia, and Sibos 2026 show accelerating demand for ProgressSoft's instant-payment and AI stack.
What critics are saying
- MOVEit litigation in Massachusetts MDL continued through September 2026, with class certification briefing pending.
- ProgressSoft disclosed a July 2026 Storage Zone Controller security flaw, unsettling regulated buyers.
- Central banks can replace vendors after implementation; Domo's acquisition shows rising platform competition from larger suites.
What makes ProgressSoft unique
- ProgressSoft powers 22 central payment infrastructures and 10,000-plus implementations worldwide.
- SYSTAC 2 launched August 3, 2026 across all six CEMAC states with ISO 20022.
- Its AI flagship won WITSA's 2026 Global AI Award for signature verification.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Remote Work Options