GRC Manager

About the Role

Ozone Management Consulting is seeking a GRC Manager to join their team in Riyadh. This full-time role involves building and operating an integrated Governance, Risk, and Compliance (GRC) framework to ensure decisions are made through approved channels, risks are addressed, and operations align with applicable laws, regulations, and internal policies.

Key Responsibilities

• Prepare and review the governance framework, committee charters, and delegation of authority matrix, ensuring follow-up on committee decisions and managing the conflict of interest register.
• Develop the risk management framework and its registers, evaluate risks in coordination with various departments, monitor treatment plans, and escalate issues exceeding approved risk tolerance.
• Identify applicable regulatory requirements, monitor the impact of changes, implement an annual compliance plan, and track licenses and their renewal dates.
• Operate the whistleblowing channel, the anti-fraud and conflict of interest program, and the professional code of conduct.
• Review draft policies and procedures before submission for approval, control their versions, and measure their actual implementation.
• Verify the consistency of governance for subsidiaries, inter-company transactions, and Service Level Agreements (SLAs) with approved frameworks.
• Follow up on the remediation of observations from internal and external audits and regulatory bodies until closure.
• Submit periodic reports to executive management and relevant committees regarding risks, compliance status, audit observations, and open decisions.
• Implement an annual awareness and training plan, and supervise the department's team, plan, and budget.

Experience and Qualifications

• A minimum of 8 to 14 years of relevant experience is required for this role.

Work Environment

This is a full-time position based in Riyadh, offering an opportunity to contribute to a structured and compliant operational framework within Ozone Management Consulting.