Governance, Risk & Compliance (GRC) Officer

About the role

The Governance, Risk & Compliance (GRC) Officer will act as a second‑line oversight function, coordinating GRC activities across all departments of Riyadh Cement Company. You will maintain reliable records, monitor internal controls, manage legal case tracking, and deliver decision‑ready reporting to senior management and governance bodies.

Key responsibilities

• Support development, maintenance, and controlled implementation of GRC policies, methodologies, and templates.
• Maintain the enterprise risk register, facilitate risk assessments with department leads, and track risk‑treatment action plans.
• Maintain the compliance obligations register, track evidence of compliance, and coordinate remediation plans for identified gaps.
• Review internal control designs and operating status, follow up on remediation, and coordinate closely with Internal Audit.
• Prepare GRC dashboards, summaries, and materials for the Risk Executive Committee, Audit Committee, and CEO Office.
• Maintain the company legal case register, coordinate with external law firms, and deliver monthly status reports to the CEO.

Required profile

• Bachelor’s degree in Risk Management, Business Administration, Finance, Accounting, Law, Engineering, or Information Systems.
• Minimum 5 years of relevant experience, with at least 3 years directly in GRC/internal controls.
• Professional certification such as GRCP, CRMA, CRM, CCEP, ISO 31000, or ISO 37301.
• Strong working knowledge of COSO ERM, ISO 31000, and ISO 37301.
• Full professional fluency in Arabic and English (written and spoken).

Required skills

• ERP GRC modules
• ISO 37301
• COSO
• Internal Controls Monitoring
• Legal Case Coordination
• Compliance Management
• GRC dashboards
• ISO 31000
• GRC policies
• MS Office
• Reporting tools