GRC Senior Specialist📣 إعلان

About SOLGulf

SOLGulf is a digital transformation consulting partner dedicated to helping organizations accelerate AI and cloud enablement while establishing trusted data foundations. With delivery centers located in the UAE, KSA, and Pakistan, SOLGulf provides comprehensive technology consulting and digital transformation services across a diverse range of industries.

The Opportunity: GRC Senior Specialist

SOLGulf is seeking a GRC Senior Specialist to join its team in Riyadh, Saudi Arabia. This full-time role is critical for developing and implementing an integrated IT Governance, Risk, and Compliance (GRC) framework. The specialist will be responsible for managing IT policies and procedures, ensuring full compliance with internal policies and applicable regulations. This position also serves as the primary liaison between the Information Technology Department and other corporate functions, including Enterprise Risk Management, Compliance, and Internal Audit, to ensure effective coordination and timely resolution of governance and compliance gaps.

Key Responsibilities

• Develop, review, and continuously improve all IT policies and procedures to address existing gaps.
• Review and update the RACI Matrix to ensure clear roles and responsibilities across IT operations and projects.
• Implement recognized governance frameworks such as COBIT 2019 and ITIL in alignment with organizational objectives.
• Ensure IT compliance with internal policies and applicable national regulations, including NCA and SDAIA requirements.
• Act as the primary point of contact for internal and external auditors, preparing responses to audit observations and following up on corrective actions until closure.
• Conduct periodic self-assessments to identify and address operational and control gaps.
• Identify, assess, monitor, and manage IT-related risks, developing mitigation and response plans.
• Establish, maintain, and regularly update the IT Risk Register.
• Serve as the official liaison between the IT Department and other corporate functions, including Enterprise Risk Management, Compliance, and Internal Audit.
• Translate business and operational requirements into IT governance controls, policies, and procedures, and vice versa.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Technology, Management Information Systems (MIS), or a related field.
• Minimum of 5–7 years of experience in IT Governance, Risk, and Compliance (GRC).

Essential Skills and Competencies

• Strong understanding of Governance and Risk Management frameworks, including COBIT, ISO 31000, and ISO 27001.
• Excellent policy and procedure writing and documentation skills.
• Strong communication and stakeholder management skills with the ability to act as a liaison across different business functions.
• Strong analytical and problem-solving skills with the ability to identify control gaps and design practical solutions.

Location and Employment Type

This is a full-time position based in Riyadh, Saudi Arabia. Qualified candidates are encouraged to apply.