Senior Technology Compliance Officer – IT Department

About the role

Ashesi University's Information Technology Department is looking for a Senior Technology Compliance Officer to lead IT compliance, governance and risk management. The role ensures technology operations meet institutional policy, legal and cybersecurity standards, and drives controls, audits and remediation. It reports to the Assistant Director – Network Security.

Key responsibilities

• Develop, implement and maintain IT compliance and governance frameworks, policies and procedures aligned with institutional requirements and applicable laws (e.g. Data Protection Act).
• Lead periodic compliance audits, risk assessments and gap analyses across systems, software licensing, access controls and data handling, producing findings and remediation plans.
• Manage software license compliance, asset inventories and vendor contract compliance for IT services.
• Support the development and testing of incident response, disaster recovery and business continuity plans with IT leadership.
• Work with IT security teams to identify, prioritize and mitigate technical and procedural security risks.
• Monitor user access, privileged accounts and change control, and recommend and enforce access control improvements.
• Liaise with internal and external auditors, regulatory bodies and partners on IT compliance matters and audit responses.
• Maintain compliance documentation, audit logs and regular management reporting on compliance posture, trends and risk metrics.
• Provide guidance and awareness training to teams and stakeholders to promote compliance adoption.

Required profile

• Bachelor's degree in Information Technology, Computer Science, Information Security or a related field.
• At least 3 years' experience in IT governance, compliance, security audit or related roles.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISA or CISSP are an added advantage.

Required skills

• Knowledge of data protection laws, cybersecurity principles and IT governance frameworks.
• Analytical, auditing and documentation skills.
• Stakeholder management and communication with technical and non-technical audiences.
• Integrity, attention to detail and ability to lead cross-functional compliance initiatives.

The application process starts immediately and continues until the position is filled; only shortlisted candidates are invited to interview and may be asked to give an academic seminar, research talk, teaching simulation or practical assessment. Compensation is reviewed against industry benchmarks and includes health insurance, retirement benefits and paid leave.