Product Owner / Business Analyst (GRC)

About the Role

Synechron is seeking an experienced Product Owner / Business Analyst (GRC) for a contract position in Riyadh, KSA. This role requires strong expertise in Risk & Compliance, policy and control framework design, attestation processes, and audit management. The successful candidate will bridge business and technology teams to deliver enterprise GRC solutions that enhance regulatory compliance, risk visibility, and governance effectiveness.

Key Responsibilities

• Gather, analyze, and document business requirements for GRC initiatives and platforms.
• Act as Product Owner, managing product backlog, user stories, prioritization, and stakeholder expectations.
• Design and maintain Policy & Control Libraries, ensuring alignment with regulatory and organizational requirements.
• Define and implement Risk & Compliance processes, controls, assessments, and reporting frameworks.
• Manage Attestation & Certification processes, including policy acknowledgements and control attestations.
• Support Audit Management activities, including audit planning, evidence collection, issue tracking, and remediation.
• Collaborate with Risk, Compliance, Internal Audit, Security, and Technology teams.
• Conduct gap assessments and recommend process improvements to strengthen governance and compliance posture.
• Facilitate UAT, stakeholder workshops, and product demonstrations.
• Prepare business requirements, process flows, functional specifications, and regulatory documentation.

Required Skills and Experience

• 5-10 years of experience as a Business Analyst, Product Owner, or GRC Consultant.
• Strong domain expertise in Governance, Risk & Compliance (GRC).
• Hands-on experience with Risk & Compliance Management, Policy Management, Control Library Design & Management, Attestation and Certification Processes, Audit Management and Issue Remediation, and Regulatory Compliance Frameworks.
• Experience translating business requirements into functional solutions.
• Strong stakeholder management and communication skills.
• Experience with Agile/Scrum methodologies.

Preferred Qualifications

• Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, MetricStream, or SAP GRC.
• Knowledge of regulatory frameworks such as ISO 27001, NIST, COBIT, SOX, PCI-DSS, and related compliance standards.
• Professional certifications such as CISA, CRISC, CGEIT, CSPO, or CBAP are advantageous.

Work Type

This is a contract position based in Riyadh, KSA.

Application Process

Interested candidates are encouraged to apply.