IT Compliance Lead

About the role

The IT Compliance Lead will drive information security compliance across all RayaCX sites and divisions. This senior position is responsible for establishing, maintaining, and continuously improving compliance with international standards and regulatory frameworks.

Key responsibilities

• Lead implementation, certification readiness, and ongoing maintenance of ISO/IEC 27001.
• Ensure continuous compliance with PCI DSS, GDPR, NIST, SOC 2 and other relevant security frameworks.
• Collaborate with IT, Security, Operations and cross‑functional teams to embed effective controls.
• Manage governance, risk management and compliance (GRC) initiatives across the organization.
• Audit and enforce IT compliance policies, procedures and control frameworks.
• Develop compliance dashboards, KPIs and management reporting.
• Design, implement and maintain IT Disaster Recovery Plans (DRPs) and Business Continuity Plans (BCPs).
• Coordinate and lead BCP, risk assessments and DR testing, documenting results and tracking improvements.
• Plan, lead and execute internal, external and certification audits, acting as the primary point of contact during client and regulator audits.
• Track audit findings, define corrective actions and ensure timely remediation.

Required profile

• Strong analytical and risk‑assessment capabilities.
• Result‑oriented with operational awareness.
• Excellent networking and client‑facing communication skills.
• Ability to translate compliance requirements into practical operational controls.
• Proven track record of minimal audit findings and effective remediation.

Required skills

• ISO/IEC 27001
• PCI DSS
• GDPR
• NIST framework
• SOC 2
• Governance, Risk & Compliance (GRC) methodologies
• IT Disaster Recovery Planning
• Business Continuity Planning
• Audit management and gap analysis