GRC Specialist (IT Risk & IT Compliance)

Job description

We are seeking an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. The candidate will be responsible for delivering a structured set of project outputs across governance, risk, compliance, and IT process improvement workstreams. Responsibilities include developing the Project Charter & Project Plan, conducting current state and maturity assessments, and producing formal reports, designing and implementing an IT Governance Framework aligned to SAMA requirements, and more.

Requirements

• Minimum 7–10 years in IT GRC, IT Risk, or IT Compliance roles · Strong working knowledge of SAMA Cybersecurity Framework · Experience delivering IT governance frameworks and policy suites · Proven track record in risk assessment and risk register management · Familiarity with Internal Audit closure processes and compliance reporting · Experience in maturity assessments aligned to recognised frameworks (NIST, ISO 27001, SAMA) · Excellent documentation and stakeholder communication skills · Prior experience in the Saudi Arabian financial or regulated sector is highly preferred

Skills