GRC Specialist (IT Risk & IT Compliance) - Immediate Joining📣 Job Ad

About the Role

Müller's Solutions is seeking an experienced GRC Specialist to join its team in Riyadh, Saudi Arabia. This full-time position is crucial for supporting a SAMA-aligned IT Risk and IT Compliance Assessment program. The successful candidate will be instrumental in delivering structured project outputs across key workstreams, including governance, risk, compliance, and IT process improvement. This is an immediate joining opportunity.

Key Responsibilities

• Develop and deliver the Project Charter and Project Plan for IT GRC initiatives.
• Conduct current state and maturity assessments, producing formal reports to document findings.
• Design and implement an IT Governance Framework aligned with SAMA requirements.
• Develop a comprehensive suite of IT policies and procedures.
• Define the IT Operating Model and create a detailed RACI Matrix.
• Build and maintain a Control Catalog, mapping it accurately to SAMA regulations.
• Establish Governance Committee Charters and develop relevant oversight Dashboards.
• Conduct Gap Assessments to identify discrepancies and produce a clear remediation roadmap.
• Perform SAMA Readiness Assessments to ensure compliance with regulatory standards.
• Complete thorough Risk Assessments for all Information Assets.
• Develop and maintain Risk Registers and corresponding Treatment Plans.
• Support IT teams in effectively closing observations raised by SAMA and Internal Audit.
• Produce detailed Cybersecurity Compliance Reports and IT Process Performance Reports.
• Deliver Knowledge Transfer Sessions to internal stakeholders, aiming for up to 10 sessions.

Qualifications and Requirements

• Minimum of 7-10 years of experience in IT GRC, IT Risk, or IT Compliance roles.
• Strong working knowledge of the SAMA Cybersecurity Framework is essential.
• Demonstrated experience in delivering IT governance frameworks and comprehensive policy suites.
• Proven track record in conducting risk assessments and managing risk registers.
• Familiarity with Internal Audit closure processes and compliance reporting procedures.
• Experience in conducting maturity assessments aligned with recognized frameworks such as NIST, ISO 27001, and SAMA.
• Excellent documentation skills and strong stakeholder communication abilities.
• Prior experience within the Saudi Arabian financial or regulated sector is highly preferred.

Required Skills

• IT GRC
• IT Risk Management
• IT Compliance
• SAMA Cybersecurity Framework
• IT Governance Frameworks
• Policy Suite Development
• Risk Assessment Methodologies
• Risk Register Management
• Internal Audit Liaison and Closure Processes
• Compliance Reporting
• Maturity Assessments
• NIST Standards
• ISO 27001 Standards
• Technical Documentation
• Stakeholder Communication and Management

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia. The role offers the opportunity to work with a talented team on projects within an innovative work environment.