Governance, Risk, and Compliance Analyst📣 Job Ad

About the Role

TASC Outsourcing is seeking a Governance, Risk, and Compliance (GRC) Analyst to join their team in Riyadh, Saudi Arabia. This role is integral to supporting the development and maintenance of the company's risk management framework. The analyst will be responsible for conducting risk assessments, generating management reports, and ensuring adherence to industry standards and local regulations.

Key Responsibilities

• Collect, validate, and analyze risk data from various business units to support comprehensive risk assessments.
• Perform risk assessments in accordance with ISO 31000 and COSO methodologies.
• Maintain and update the enterprise risk register, ensuring accuracy and completeness.
• Develop and deliver management reports detailing risk exposure, trends, and remediation progress.
• Configure and manage GRC tools to monitor risk controls and compliance activities.
• Collaborate with cross-functional teams to identify, evaluate, and implement risk mitigation strategies.
• Support internal and external audit processes and follow up on remediation plan implementation.
• Monitor changes in regulations and industry standards to ensure ongoing organizational compliance.

Qualifications and Requirements

• Bachelor's degree in Finance, Business Administration, Risk Management, or a closely related field.
• 2 to 5 years of hands-on experience in governance, risk management, and compliance functions.
• Demonstrated proficiency in risk data collection, conducting risk assessments, and maintaining risk registers.
• Strong expertise in applying ISO 31000 and COSO risk management frameworks.
• Practical experience with GRC tools and platforms.
• Advanced skills in Microsoft Excel, PowerPoint, and Word.
• Excellent capabilities in management reporting and stakeholder communication.
• Fluency in English is required.

Required Skills

• Governance, Risk, and Compliance (GRC)
• Risk Management Framework Development and Maintenance
• Risk Assessments
• Management Reporting
• ISO 31000 Standards
• COSO Framework
• GRC Tools and Platforms
• Microsoft Office Suite (Excel, PowerPoint, Word)
• Risk Data Collection and Analysis
• Risk Register Maintenance
• Enterprise Risk Management
• Risk Control Monitoring
• Compliance Activities
• Cross-functional Collaboration
• Risk Mitigation Strategies
• Audit Process Support
• Remediation Plan Management
• Regulatory Monitoring
• Stakeholder Communication

Preferred Qualifications

Professional certifications such as CRISC, CISA, or ISO 31000 Lead Risk Manager are preferred. Experience with GRC platforms like SAP GRC or MetricStream, knowledge of the Saudi Arabian regulatory environment, a Master's degree in a relevant discipline, and proficiency in Arabic are also considered advantageous.

Work Context

This is a full-time position based in Riyadh, Saudi Arabia, with TASC Outsourcing. The role requires 2-5 years of experience in governance, risk, and compliance functions.