Hiring Information Technology (IT) Policy Framework Analyst (Short-term), - APAC

About DT Global Asia Pacific

At DT Global Asia Pacific, we aim to positively impact people’s lives through delivery excellence. As a leading implementing partner across Asia and the Pacific, we co-create locally led solutions in partnership with governments, communities, and stakeholders. We bring together talented teams and deep regional expertise to deliver initiatives that promote inclusive economic growth, essential services, and resilient, secure communities. With over 1,500 staff, experts in 22+ countries and more than 60 years of development experience, we tackle complex community, national and transnational challenges — from governance and justice systems to climate resilience, infrastructure and social equity — with innovative thinking and a commitment to long-term impact.

For more information, please see www.dt-global.com

Objectives of Role

The Technology Policy Framework Contractor will develop a comprehensive enterprise technology policy framework that rationalises, modernise, and standardise the organisation’s technology-related policies, standards, procedures, guidelines, and governance mechanisms.

The assignment will establish a consistent, scalable, and implementation-ready policy architecture covering technology governance, cybersecurity coordination, data governance, AI governance, cloud services, digital workplace tools, software development, digital systems, and related technology domains.

The framework will define clear policy ownership, approval, review, audit, compliance, exception management, user awareness, and certification processes to support effective governance, organisational accountability, responsible technology adoption, and compliance with regulatory, donor, contractual, and organizational obligations.

Expected Outcomes

Success Measures

· Completion of policy inventory and gap analysis within the agreed timeframe.

· Delivery of an approved or approval-ready enterprise technology policy framework.

· Establishment of clear governance, ownership, approval, audit, exception, compliance, and review processes.

· Adoption or approval-readiness of standardized policy templates and lifecycle management practices.

· Development of an implementation-ready user certification, acknowledgement, and awareness framework.

· Delivery of a realistic and actionable implementation roadmap.

· Positive stakeholder feedback regarding the framework’s usability, clarity, practicality, and alignment with organizational needs.

Roles and Responsibilities

Strategic Responsibilities

· Assess the current technology policy landscape and identify gaps, overlaps, inconsistencies, redundancies, outdated documents, and missing governance mechanisms.

· Design an enterprise-wide technology policy governance model aligned with organizational risk management, compliance, operational, contractual, and accountability requirements.

· Establish a standardized policy hierarchy and document structure covering policies, standards, procedures, guidelines, technical controls, user guidance, and awareness materials.

· Develop governance mechanisms that support accountability, transparency, usability, audit readiness, exception management, and continuous improvement.

· Align technology-related policies with regulatory, donor, contractual, organizational, and programmatic obligations.

· Incorporate emerging considerations related to AI governance, responsible AI use, data governance, data privacy, cybersecurity, cloud technologies, software development, and digital workplace tools.

· Translate complex technology, data, AI, risk, and governance requirements into practical organizational policies and implementation guidance.

· Support institutional adoption through user awareness, role-based certification, communication, and change management recommendations.

Policy Assessment and Rationalization

· Conduct a comprehensive review of existing technology-related policies, standards, procedures, guidelines, technical controls, and user guidance materials.

· Analyze policy ownership, applicability, audience, scope, approval status, effectiveness, versioning, and review cycles.

· Identify duplicate, outdated, conflicting, unclear, or missing policy instruments.

· Assess whether current policy instruments adequately cover technology governance, cybersecurity, data governance, AI governance, cloud services, software development, digital workplace tools, access management, records, and responsible technology use.

· Develop a consolidated policy inventory and gap assessment.

· Recommend which policy instruments should be retained, revised, consolidated, retired, or newly developed.

Technology Policy Framework Design

· Develop a standardized enterprise technology policy framework and governance structure.

· Define a policy hierarchy including:

o Policies

o Standards

o Procedures

o Guidelines

o Technical Controls

o User Guidance

· Certification or Attestation Requirements

· Establish consistent templates, naming conventions, document structures, approval metadata, version control fields, and review frequency.

· Define roles and responsibilities for policy ownership, stewardship, review, approval, publication, monitoring, and maintenance.

· Ensure that the framework is risk-based, practical, scalable, and usable by both technical and non-technical stakeholders.

Governance, Approval, and Compliance Processes

· Design policy lifecycle management processes covering:

o Drafting

o Stakeholder consultation

o Technical review

o Legal and compliance review

o Risk review

o Approval

o Publication

o Communication

o Training

o User acknowledgement or certification

o Periodic review

o Retirement or archiving

· Define approval authorities, governance committees, review bodies, and escalation pathways.

· Establish policy exception and waiver processes.

· Develop audit and compliance monitoring mechanisms.

· Create reporting and escalation processes for non-compliance.

User Certification and Awareness Framework

· Develop a user certification, acknowledgement, and attestation framework.

· Define mandatory policy acknowledgement requirements.

· Establish certification frequencies based on user roles, risk exposure, system access, and technology use.

· Create role-based certification requirements for technical users, general users, managers, system owners, data users, AI users, and other relevant groups.

· Develop policy awareness, communication, and adoption recommendations.

· Define mechanisms for tracking and reporting certification completion.

· Recommend priority topics for onboarding, refresher sessions, self-paced learning, and targeted awareness campaigns.

· Stakeholder Collaboration and Enablement

· Facilitate consultations with business, technology, legal, risk, compliance, HR, operations, program, data, and executive stakeholders.

· Gather requirements and validate framework recommendations.

· Present findings and recommendations to governance bodies and leadership teams.

· Support implementation planning and transition activities.

Deliverables

· Inception note and workplan, including methodology, document request list, consultation plan, timeline, and deliverable schedule.

· Technology policy inventory covering existing technology-related policies, standards, procedures, guidelines, technical controls, and related governance documents.

· Gap assessment and rationalization report identifying duplicate, outdated, conflicting, missing, unclear, or misaligned policy instruments.

· Enterprise Technology Policy Framework covering policy architecture, hierarchy, scope, domains, document structure, and governance principles.

· Policy governance model including ownership, stewardship, approval authorities, review bodies, escalation pathways, and accountability structures.

· Policy lifecycle management process documentation covering drafting, review, approval, publication, training, certification, periodic review, retirement, and archiving.

· Audit, compliance, exception, and review process framework.

· User certification, acknowledgement, and awareness framework.

· Standardized policy templates and guidance materials, including templates for policies, standards, procedures, guidelines, technical controls, exception requests, and review documentation, as applicable.

· Implementation roadmap and change management recommendations.

· Final presentation to leadership or the designated governance body summarizing findings, recommendations, implementation priorities, and decision points.

Reporting Lines and Performance Management

Reports to IT Governance and Policy Manager

Selection Criteria

Education and Qualifications

· Bachelor’s or Master’s degree in Information Technology, Information Systems, Data Science, Statistics, Governance, Risk Management, Public Policy, Law, Business Administration, Development Management, Economics, Social Sciences, or a related field.

· Relevant certifications are desirable but not mandatory, including CISA, CRISC, CGEIT, CISSP, ISO 27001 Lead Implementer, COBIT, ITIL, data governance, AI governance, privacy, risk management, or equivalent credentials.

Experience Requirements

· At least 8 years of experience in technology governance, data governance, AI governance, policy development, digital systems, risk management, compliance, institutional capacity-building, or related fields.

· Demonstrated experience developing frameworks, roadmaps, policies, guidance materials, implementation plans, or governance documentation for organizations.

· Experience translating complex technology, data, AI, risk, or compliance requirements into practical organizational policies, processes, and guidance materials.

· Experience with governance models, regulatory or compliance environments, institutional risk management, or organizational accountability mechanisms.

· Experience working in international, donor-funded, NGO, public sector, financial services, or complex multi-stakeholder organizations preferred.

· Proven experience facilitating senior stakeholder engagement, consultations, workshops, validation sessions, or executive-level presentations.

· Experience developing user awareness, training, certification, attestation, or capacity-building materials is highly desirable.

Technical Expertise / Skills / Knowledge

· Strong understanding of technology governance, policy architecture, and organizational risk management.

· Knowledge of data governance, data privacy, data protection, data ethics, responsible AI, AI governance, cybersecurity governance, and cloud governance principles.

· Familiarity with ISO 27001, NIST, COBIT, ITIL, AI governance frameworks, data governance frameworks, privacy frameworks, or related standards is desirable.

· Experience developing policy lifecycle, compliance management, audit readiness, exception management, and review processes.

· Excellent analytical, facilitation, synthesis, and documentation skills.

· Ability to translate complex governance requirements into practical organizational policies and implementation guidance.

· Ability to work with both technical and non-technical stakeholders.

Behavioral Competenc­­­­ies

· Strategic thinker with strong governance orientation.

· Excellent written communication and policy drafting skills.

· Strong stakeholder management and facilitation capabilities.

· Independent and results-oriented.

· Strong attention to detail and quality assurance.

· Ability to influence senior leaders and build consensus.

· Practical, systems-oriented, and able to design solutions suited to organizational maturity and capacity.

· Able to manage ambiguity and reconcile different technical, operational, legal, and compliance priorities.

Why join DT Global?

At DT Global, we are committed to the ongoing professional and personal development of all our people, helping them grow and reach their full potential. Harnessing their talent, maximising their contribution, and rewarding performance are all integral to our success.

We welcome your interest in joining the DT Global Asia Pacific team.

HOW TO APPLY
Click the 'Apply Now' button.

Please submit
1) Your CV
2) A cover letter addressing the selection criteria

APPLICATIONS CLOSE 4th August 2026 11:59 pm Manila time
Should this role be of interest, we encourage you to apply as soon as possible. Kindly note only shortlisted applicants will be contacted.

People with lived experience of the regions in which DT Global operates are strongly encouraged to apply. DT Global welcomes applications from individuals with diverse backgrounds including First Nations peoples, diverse Sexual Orientation, Gender Identity and Expression, and Sex Characteristics (SOGIESC), and people with disabilities.

We take a zero-tolerance approach to sexual exploitation, abuse and harm of adults and children; fraud, corruption and bribery; modern slavery; and any form of exploitation across our operations, partnerships, and supply chains. We uphold the highest standards of integrity and expect the same of those we work with.

Engagement with DT Global is subject to formal background screening, criminal record checks, employment verification, and periodic compliance checks. All DT Global staff receive safety, compliance, safeguarding and integrity training, and we expect our personnel and partners to always act in alignment with our company values.