GRC Specialist

About the role

A GRC Specialist position based in Riyadh, Saudi Arabia, focused on governance, risk and compliance within IT. The role works in person, with interviews conducted remotely.

Key responsibilities

• Design, implement and maintain GRC frameworks
• Ensure compliance with regulatory and internal policy requirements
• Conduct IT risk assessments and develop mitigation plans
• Monitor and report on compliance metrics and key risk indicators (KRIs)
• Prepare documentation and support internal and external audits
• Manage risk tracking tools and GRC platforms
• Lead training and awareness programmes on risk, compliance and internal controls
• Promote a risk-aware culture across IT, security, audit and business teams
• Collaborate with stakeholders to align IT GRC with enterprise governance

Required profile

• Bachelor's degree in Information Technology or a related field
• 5 to 7 years of experience in IT risk management, compliance or audit
• Fluent Arabic, spoken and written

Required skills

• Knowledge of regulatory frameworks and standards such as ISO and COBIT
• Experience with GRC platforms such as Teammate and Enablon
• Analytical, communication and problem-solving skills