General Manager Governance Risk & Compliance📣 إعلان

About the Role

Petromin Corporation is seeking a General Manager, Governance, Risk & Compliance (GRC) to lead the design, implementation, and maintenance of integrated governance, enterprise risk management, and compliance frameworks. This full-time position, based in Jeddah or Makkah, is critical for enabling the organization to identify, assess, and manage its principal risks effectively, while ensuring adherence to applicable laws, regulations, and corporate governance requirements, including those from the Capital Market Authority (CMA).

Core GRC Framework Management

• Develop and maintain the corporate governance framework, governance manual, Delegation of Authority (DoA), Code of Conduct, and committee charters, ensuring alignment with corporate governance regulations and the Companies Law.
• Establish and operate the Enterprise Risk Management (ERM) framework, aligned to ISO 31000 / COSO ERM, including defining risk appetite and tolerances, maintaining the enterprise risk register, and facilitating risk assessments.
• Own the design and coordination of the internal control framework and control self-assessments (second line), and coordinate remediation efforts.
• Govern the full policy lifecycle—development, approval, publication, and periodic review—and maintain the central policy repository.

Compliance and Strategic Oversight

• Build and manage the compliance program, maintaining the regulatory obligations / compliance universe, monitoring regulatory changes, performing compliance monitoring and testing, and managing the whistleblowing / speak-up channel.
• Lead governance, risk, and compliance workstreams supporting listing requirements and post-listing obligations, particularly where the company is preparing for or subject to public listing.
• Oversee compliance with the Saudi Personal Data Protection Law (PDPL) and related data-governance obligations.
• Oversee or coordinate business continuity and crisis-management frameworks as mandated.

Leadership and Reporting

• Champion a risk-aware and ethical culture across the organization, including developing awareness and training programs.
• Lead, develop, and retain the GRC team across governance, risk, and compliance disciplines.
• Implement and optimize GRC platforms and tooling to integrate risk, control, and compliance data.
• Produce consolidated GRC reporting and dashboards for executive management and Board committees.

Key Performance Indicators

• Residual risk maintained within approved risk appetite.
• Number and severity of compliance breaches / regulatory findings.
• Policy currency (percentage of policies within review cycle).
• Control effectiveness from second-line testing and self-assessment.
• Completion of governance and compliance milestones, including listing readiness where applicable.
• Timeliness and accuracy of regulatory reporting and submissions.

Candidate Profile

The ideal candidate for this General Manager position will possess over 10 years of experience in governance, enterprise risk management, and compliance. This role requires a professional capable of strengthening the second line of defense and embedding a risk-aware, ethical culture that supports sustainable value creation within Petromin Corporation.