Governance Manager

Key Responsibilities:

Governance 

• Implement and maintain governance frameworks, policies, and procedures in line with regulatory requirements and industry best practices. 

• Ensure consistent application of governance standards across all data centre sites and business functions. 

• Coordinate governance reporting, documentation, and management dashboards. 

• Prepare governance materials and reports for senior management and internal committees. 

• Promote ethical conduct, accountability, and transparency through governance awareness and training initiatives. 

Risk Management 

• Support the implementation of the enterprise risk management (ERM) framework across data centre operations. 

• Coordinate and conduct periodic risk assessments, including operational, regulatory, and strategic risks. 

• Maintain and update risk registers, risk treatment plans, and key risk indicators (KRIs). 

• Work closely with operations and functional teams to embed risk management practices into day-to-day activities. 

• Monitor risk mitigation actions and escalate material risks to the Compliance, Risk & Governance Director. 

Compliance 

• Support the implementation and monitoring of compliance programmes relevant to data centre operations, including security, environmental, and operational compliance. 

• Track regulatory and contractual compliance obligations and monitor adherence to applicable local and international standards (e.g. ISO, SOC, data protection, regulatory requirements). 

• Assist in monitoring compliance incidents, breaches, and remediation activities, ensuring timely closure and reporting. 

• Stay informed of regulatory and industry developments affecting data centre operations and communicate relevant updates internally. 

Business Continuity & Crisis Management 

• Support the design, implementation, and maintenance of the Business Continuity Management System (BCMS) across data centre operations. 

• Coordinate Business Impact Assessments (BIA), risk scenarios, and continuity strategies with operations and critical function owners. 

• Maintain and review Business Continuity Plans (BCP), Disaster Recovery (DR) coordination (in collaboration with IT), and crisis management procedures. 

• Organise and facilitate BCP/DR exercises, simulations, and crisis response drills; track lessons learned and improvement actions. 

• Support incident response governance, post-incident reviews, and resilience improvement initiatives 

Audit & Assurance 

• Coordinate internal and external audits related to governance, risk, and compliance (e.g. ISO, SOC, regulatory audits). 

• Track audit findings, corrective action plans, and remediation progress. 

• Ensure audit documentation, evidence, and records are maintained in an audit ready manner. 

Stakeholder Engagement & Collaboration 

• Act as a key liaison between the GRC & BCM function and operations, engineering, EHS, IT, and corporate teams. 

• Provide guidance and hands-on support to site teams on governance, risk, and compliance requirements. 

• Support training and awareness programmes related to GRC and BCM frameworks and controls. 

Continuous Improvement 

• Prepare periodic GRC metrics, reports, and dashboards for management review. 

• Identify opportunities to improve governance, risk, and compliance processes and controls. 

• Support the Director in scaling GRC frameworks and practices as the organisation expands regionally and globally. 

Key Requirements 

Qualifications 

• Bachelor’s degree in risk management, Business, Law, Accounting, Engineering, or a related discipline. 

• Professional certifications such as ISO22301, ISO 27001, ISO 31000, CISA, CRISC, CIA, or equivalent are an advantage. 

Experience 

• Minimum 8–12 years’ experience in governance, risk management, compliance, business continuity, audit, or related functions. 

• Experience in data centres, critical infrastructure, technology, utilities, or industrial operations is strongly preferred. 

• Proven experience leading or coordinating BCP, DR exercises, audits, and risk assessments.

Skills & Competencies 

• Strong understanding of GRC and Business Continuity frameworks. 

• Ability to translate policies and frameworks into practical operational controls. 

• Strong documentation, reporting, and analytical skills. 

• Effective stakeholder management and communication skills. 

• Detail-oriented, organised, and able to manage multiple priorities.