Governance, Risk & Compliance (GRC) Officer

About the Role: • you will act as a second-line oversight function. You will coordinate GRC activities across departments, maintain reliable records, monitor internal controls and treatment plans, manage legal case tracking, and provide decision-ready reporting to management and governance bodies. Key Responsibilities: • GRC Framework & Governance: Support the development, maintenance, and controlled implementation of GRC policies, methodologies, and templates. • Enterprise Risk Management (ERM): Maintain the enterprise risk register, facilitate risk assessments with department leads, and track risk treatment action plans. • Compliance Management: Maintain the compliance obligations register, track evidence of compliance, and coordinate remediation plans for any identified gaps. • Internal Controls Monitoring: Review internal control designs and operating status, follow up on remediation, and coordinate closely with Internal Audit. • Executive & Committee Reporting: Prepare GRC dashboards, summaries, and materials for the Risk Executive Committee, Audit Committee, and CEO Office. • Legal Case Coordination: Maintain the company legal case register, coordinate with external law firms, and deliver monthly status reports to the CEO. Qualifications & Requirements: Education: Bachelor’s degree in Risk Management, Business Administration, Finance, Accounting, Law, Engineering, or Information Systems. Experience: Minimum of 5 years of relevant experience, with at least 3 years directly in GRC/internal controls. (Experience in a Saudi-listed or industrial enterprise is preferred). Certifications: A recognized professional certification is required (e.g., GRCP, CRMA, CRM, CCEP, ISO 31000, ISO 37301). Framework Knowledge: Strong working knowledge of COSO ERM, ISO 31000, and ISO 37301. Systems & Languages: Proficiency in ERP GRC modules, MS Office, and reporting tools. Full professional fluency in Arabic and English (written and spoken). Show more Show less

Education: Bachelor’s degree in Risk Management, Business Administration, Finance, Accounting, Law, Engineering, or Information Systems. Experience: Minimum of 5 years of relevant experience, with at least 3 years directly in GRC/internal controls. Certifications: A recognized professional certification is required (e.g., GRCP, CRMA, CRM, CCEP, ISO 31000, ISO 37301). Framework Knowledge: Strong working knowledge of COSO ERM, ISO 31000, and ISO 37301. Systems & Languages: Proficiency in ERP GRC modules, MS Office, and reporting tools. Full professional fluency in Arabic and English (written and spoken).

GRC Framework & Governance: Support the development, maintenance, and controlled implementation of GRC policies, methodologies, and templates. Enterprise Risk Management (ERM): Maintain the enterprise risk register, facilitate risk assessments with department leads, and track risk treatment action plans. Compliance Management: Maintain the compliance obligations register, track evidence of compliance, and coordinate remediation plans for any identified gaps. Internal Controls Monitoring: Review internal control designs and operating status, follow up on remediation, and coordinate closely with Internal Audit. Executive & Committee Reporting: Prepare GRC dashboards, summaries, and materials for the Risk Executive Committee, Audit Committee, and CEO Office. Legal Case Coordination: Maintain the company legal case register, coordinate with external law firms, and deliver monthly status reports to the CEO.