SENIOR SPECIALIST REGULATORY & COMPLIANCE

<div style="border-top: none; border-right: none; border-left: none; border-image: initial; border-bottom: 1pt solid windowtext; padding: 0in 0in 1pt; font-size: 14px;" id="isPasted" fr-original-style="mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt; mso-border-bottom-alt:solid windowtext .5pt;padding:0in 0in 1.0pt 0in;"><p style="border: none; padding: 0in; font-size: 14px;" fr-original-style="border:none;mso-border-bottom-alt:solid windowtext .5pt; padding:0in;mso-padding-alt:0in 0in 1.0pt 0in;"><strong fr-original-style="" style="font-weight: 700;">ROLE OBJECTIVE&nbsp;</strong></p><p style="text-align: justify; border: none; padding: 0in; font-size: 14px;" fr-original-style="text-align:justify;border:none;mso-border-bottom-alt: solid windowtext .5pt;padding:0in;mso-padding-alt:0in 0in 1.0pt 0in;">Senior Specialist, Regulatory Compliance is the primary liaison with Omani ministries and regulators to streamline approvals for client projects and deals. The role proactively engages with regulatory bodies, translates requirements into actionable checklists for sales/solution teams, prepares and shepherds approval submissions end‑to‑end, and analyses new/proposed regulations to identify risks and opportunities for ICT offerings (cloud, cybersecurity, data centre/hosting, connectivity and digital services). This is an external‑facing role geared to reduce approval cycle time and unlock growth, while ensuring compliant solutions.</p><p style="text-align: justify; border: none; padding: 0in; font-size: 14px;" fr-original-style="text-align:justify;border:none;mso-border-bottom-alt: solid windowtext .5pt;padding:0in;mso-padding-alt:0in 0in 1.0pt 0in;"><strong fr-original-style="" style="font-weight: 700;">RESPONSIBILITIES</strong></p></div><p style="margin-bottom: 0in; line-height: 150%; font-size: 14px;" fr-original-style="margin-bottom:0in;line-height:150%;"><strong fr-original-style="" style="font-weight: 700;">Regulatory engagement &amp; relationship management&nbsp;</strong></p><ul fr-original-style="" style="font-size: 14px;"><li>Serve as the primary point of contact with relevant authorities (e.g., MTCIT, TRA, Environment Authority, CDAA, Royal Oman Police/Immigration for data hosting where relevant, Central Bank of Oman (CBO) and Capital Market Authority (CMA) for sector approvals, Ministry of Energy &amp; Minerals for O&amp;G) as applicable to each opportunity</li><li>Build a regulator contact map, meeting cadence and agenda; organise pre‑filing consultations and clarifications to de‑risk submissions.</li><li>Maintain a repository of regulator guidance, circulars and precedents; share updates via internal bulletins.</li><li><strong fr-original-style="" style="font-weight: 700;">&nbsp;</strong></li></ul><p style="margin-bottom: 0in; text-align: justify; line-height: 150%; font-size: 14px;" fr-original-style="margin-bottom:0in;text-align:justify;line-height: 150%;"><strong fr-original-style="" style="font-weight: 700;">Client approvals &amp; deal enablement&nbsp;</strong></p><ul fr-original-style="" style="font-size: 14px;"><li>For each pursuit, develop an approval plan with prerequisites, artefacts and timelines; align with bid/no‑bid gates.</li><li>Prepare complete submission packs (cover letters, forms, solution descriptions, data‑flow/architecture diagrams, security controls, DPIAs where required, data‑residency statements, SLAs, business justifications and client consents)</li><li>Coordinate internal reviews (Legal, Security, Data Protection, Finance/Tax) and obtain approvals per DOA; manage filings via GR and track status to closure.</li><li>Support RFP responses with regulatory narratives, exemptions/waivers requests, and letters of intent/comfort from authorities where feasible.</li><li><strong fr-original-style="" style="font-weight: 700;">&nbsp;</strong></li></ul><p style="margin-bottom: 0in; text-align: justify; line-height: 150%; font-size: 14px;" fr-original-style="margin-bottom:0in;text-align:justify;line-height: 150%;"><strong fr-original-style="" style="font-weight: 700;">Compliance management (solution‑level)&nbsp;</strong></p><ul fr-original-style="" style="font-size: 14px;"><li>Translate cross‑cutting obligations (PDPL, cybersecurity, cloud/hosting, telecom/connectivity, sector outsourcing and incident reporting) into solution design requirements and contract conditions.</li><li>Review commercial contracts for regulatory clauses (data location, audit/inspection rights, breach notification windows, subcontracting/outsourcing approvals, change‑control).</li><li>Maintain a regulatory register mapped to offerings and sectors with owners, controls and evidence requirements.</li><li><strong fr-original-style="" style="font-weight: 700;">&nbsp;</strong></li></ul><p style="margin-bottom: 0in; text-align: justify; line-height: 150%; font-size: 14px;" fr-original-style="margin-bottom:0in;text-align:justify;line-height: 150%;"><strong fr-original-style="" style="font-weight: 700;">Policy analysis &amp; advocacy&nbsp;</strong></p><ul fr-original-style="" style="font-size: 14px;"><li>Monitor the pipeline of laws/regulations and analyse impact on offerings (barriers, dependencies, timing); publish impact notes and go/no‑go recommendations.</li><li>Draft Onetech’s consultation responses/position papers; participate in regulator roundtables/working groups and industry associations.</li></ul><p style="margin-bottom: 0in; text-align: justify; line-height: 150%; font-size: 14px;" fr-original-style="margin-bottom:0in;text-align:justify;line-height: 150%;"><strong fr-original-style="" style="font-weight: 700;">&nbsp;</strong></p><p style="margin-bottom: 0in; text-align: justify; line-height: 150%; font-size: 14px;" fr-original-style="margin-bottom:0in;text-align:justify;line-height: 150%;"><strong fr-original-style="" style="font-weight: 700;">Sector desk expertise&nbsp;</strong></p><ul fr-original-style="" style="font-size: 14px;"><li>Build deep understanding of sector‑specific expectations:</li><li>O&amp;G/Government: critical infrastructure, on‑prem/sovereign hosting preferences, data classification, incident reporting, safety/security permits.</li><li>Financial services: CBO/CMA outsourcing and cloud guidelines, data‑localisation or access requirements, third‑party risk and resilience testing.</li><li>Develop sector‑specific checklists, templates and training for account/solution teams.</li></ul><p style="margin-bottom: 0in; text-align: justify; line-height: 150%; font-size: 14px;" fr-original-style="margin-bottom:0in;text-align:justify;line-height: 150%;"><strong fr-original-style="" style="font-weight: 700;">&nbsp;</strong></p><p style="margin-bottom: 0in; text-align: justify; line-height: 150%; font-size: 14px;" fr-original-style="margin-bottom:0in;text-align:justify;line-height: 150%;"><strong fr-original-style="" style="font-weight: 700;">Governance, metrics &amp; continuous improvement</strong></p><ul fr-original-style="" style="font-size: 14px;"><li>Define and track KPIs: approval cycle time, first‑time‑right rate, number of regulator engagements, deals enabled, exceptions resolved.</li><li>Standardise and continuously improve templates (regulatory checklist, DPIA, data‑mapping, consent forms, change‑request formats) and a central approvals tracker</li><li>Ensure ABAC/Conflicts of Interest compliance in all external interactions; log meetings and decisions.</li></ul>