Manager – IT & Compliance

Colombo, Sri Lanka

About Client Partner

Our client partner is a premier inbound and outbound travel, tour operations, and destination management company in Sri Lanka. Operating within the dynamic travel and tourism sector, the enterprise delivers curated tour itineraries, luxury holiday experiences, and bespoke hospitality arrangements for global travelers. They offer a fast-paced, tech-enabled environment for innovative IT and compliance leaders.

About the Role

We are seeking a strategic, analytical, and security-focused Manager – IT & Compliance to oversee the organization's technology infrastructure, digital systems, cybersecurity protocols, and regulatory compliance frameworks. In this role, you will be responsible for driving IT operations, managing cloud and network infrastructure, safeguarding enterprise data privacy, implementing IT governance policies, and ensuring full compliance with local and international travel industry regulations and standards (such as GDPR, PCI-DSS, and local data protection laws).

Responsibilities

IT Infrastructure & Systems Management: Oversee the administration, maintenance, and optimization of enterprise IT systems, network infrastructure, servers, and cloud-based travel management platforms.
Cybersecurity & Data Protection: Establish and enforce robust cybersecurity frameworks, data privacy measures, firewall management, access controls, and data backup protocols.
Compliance & Risk Governance: Develop, implement, and monitor IT policies, data protection guidelines, and regulatory compliance standards tailored to global travel and booking systems (e.g., GDPR, PCI-DSS).
Vendor & Software Management: Lead relationships with IT vendors, software providers, and telecommunications partners, managing software licensing, hardware procurement, and service level agreements (SLAs).
Digital Transformation & Support: Drive technology upgrades, software integration projects (CRM, booking engines, ERP), and oversee end-user IT support for internal teams.
Disaster Recovery & Business Continuity: Formulate, test, and maintain disaster recovery (DR) plans and business continuity procedures to minimize system downtime and operational risks.
Audit & Reporting: Conduct periodic internal IT and security audits, risk assessments, and compliance reviews, delivering detailed reports and mitigation strategies to executive management.

Requirements

Educational Qualifications: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related discipline. Professional certifications (e.g., CISA, CISM, CISSP, ITIL, ISO 27001) are highly advantageous.
Years of Experience: 5 to 8 years of progressive IT experience, with at least 2–3 years in an IT management, cybersecurity, or IT compliance leadership role.
Industry Knowledge: Deep understanding of IT governance frameworks, cybersecurity protocols, cloud platforms (AWS/Azure/Microsoft 365), and data privacy regulations (GDPR, PCI-DSS). Experience in the travel, hospitality, or e-commerce sector is a plus.
Technical Capabilities: Hands-on expertise in network architecture, systems administration, database security, firewall configuration, and IT audit methodologies.
Core Competencies: Strong strategic planning, problem-solving, risk management, stakeholder communication, and team leadership capabilities.