Fintech Business Analyst AML & GRC

About Solidrange

Solidrange is a cybersecurity company based in Riyadh, specializing in the development of modern platforms to address cybersecurity and enterprise Governance, Risk, and Compliance (GRC) challenges. The company aims to transform the GRC technology landscape by helping organizations modernize their practices and reduce operational overhead. Its mission focuses on reducing human-driven cybersecurity risks, simplifying compliance and risk management, and facilitating seamless business continuity.

The Role: Fintech Business Analyst AML & GRC

Solidrange is seeking a Fintech Business Analyst AML & GRC to join its team in Riyadh. This full-time role requires 5-10 years of experience and focuses on product development rather than operational customer onboarding. The selected candidate will support the design and enhancement of fintech products by translating Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) obligations, user needs, and market requirements into product specifications.

Key Responsibilities

• Elicit, analyze, document, and prioritize business and regulatory requirements for fintech AML and GRC capabilities.
• Translate applicable Saudi Capital Market Authority (CMA) and Saudi Central Bank (SAMA) AML/CFT rules, regulations, circulars, and supervisory expectations into business rules, controls, workflows, acceptance criteria, and traceability matrices.
• Analyze AML-related product journeys and capabilities, including configurable KYC/CDD, enhanced due diligence, beneficial ownership, sanctions and PEP screening, transaction monitoring, alert investigation, case management, escalation, and regulatory reporting, to define functional requirements and product improvements.
• Facilitate workshops with Compliance, MLRO, Risk, Operations, Product, Engineering, Information Security, Internal Audit, and other stakeholders.
• Develop business requirement documents, process maps, user stories, use cases, data requirements, decision tables, functional specifications, and test scenarios.
• Support AML risk assessments, control mapping, issue management, remediation tracking, regulatory change assessments, and maintenance of evidence within the GRC platform.
• Define and validate data fields, risk-rating logic, customer segmentation, alert scenarios, thresholds, workflow rules, dashboards, and management information requirements.
• Coordinate user acceptance testing, defect triage, requirements traceability, release readiness, and post-implementation validation for AML and compliance features.
• Identify product, control, data, integration, and user-experience gaps; assess their impact and recommend practical fintech product enhancements that balance regulatory compliance, usability, scalability, and operational efficiency.
• Maintain clear documentation and support audit, assurance, and regulatory examinations by ensuring requirements, approvals, evidence, and remediation actions are traceable.

Role Focus

The primary focus of this position is business analysis and product development for fintech AML and GRC capabilities within CMA- and SAMA-regulated contexts. The role connects regulatory obligations and user needs with product discovery, requirements, data, controls, integrations, workflows, testing, release readiness, and continuous product improvement. This is a product- and technology-oriented position that supports the design of customer-onboarding and AML features, but does not involve executing customer onboarding, alert investigations, case handling, or other operational AML activities.

Qualifications and Experience

• Demonstrable knowledge of Anti-Money Laundering (AML) and Saudi Arabia’s Capital Market Authority (CMA) and Saudi Central Bank (SAMA) regulatory environments.
• Practical GRC exposure in the AML domain.
• 5-10 years of relevant professional experience.

Collaboration and Stakeholder Engagement

The selected candidate will partner with Compliance, the MLRO, Risk, Product, Technology, and Operations teams to develop AML and GRC product capabilities such as KYC/CDD configuration, sanctions and PEP screening, transaction monitoring, case management, regulatory reporting, control assurance, and audit evidence.