GRC Specialist: IT Risk & Compliance (SAMA)

muller's solutions; As Sudiyah; On-site; OMR 31,000 - 42,000; Full time

Benefits offered by this job

Competitive salary

Benefits package

Exciting projects

Job summary

Müller’s Solutions is seeking an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. You will deliver structured outputs across governance, risk, compliance, and IT process improvement workstreams.

Responsibilities include designing IT Governance Frameworks, developing policy suites, risk registers, and remediation roadmaps, plus conducting maturity assessments and SAMA readiness reviews. Strong stakeholder communication is essential.

Qualifications

• 7–10 years in IT GRC, IT Risk, or IT Compliance roles
• Strong working knowledge of SAMA Cybersecurity Framework
• Experience delivering IT governance frameworks and policy suites
• Proven track record in risk assessment and risk register management
• Familiarity with Internal Audit closure processes and compliance reporting
• Experience in maturity assessments aligned to frameworks (NIST, ISO 27001, SAMA)
• Excellent documentation and stakeholder communication skills
• Prior experience in Saudi Arabian financial or regulated sector preferred

Responsibilities

• Develop and deliver the Project Charter & Project Plan
• Conduct current state and maturity assessments and produce formal reports
• Design and implement IT Governance Framework aligned to SAMA requirements
• Develop full IT policies and procedures
• Define IT Operating Model and RACI Matrix
• Build and maintain a Control Catalog mapped to SAMA
• Establish Governance Committee Charters and Dashboards
• Conduct Gap Assessments and remediation roadmaps
• Perform SAMA Readiness Assessments
• Complete a Risk Assessment for Information Assets
• Develop and maintain Risk Registers and Treatment Plans
• Support IT teams in closing SAMA and Internal Audit observations
• Produce Cybersecurity Compliance Reports and IT Process Performance Reports
• Deliver Knowledge Transfer Sessions to internal stakeholders (up to 10 sessions)

Skills

GRC

IT Risk

IT Compliance

SAMA

Policy

Job description

Müller’s Solutions is seeking an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. You will deliver structured outputs across governance, risk, compliance, and IT process improvement workstreams.

Responsibilities include designing IT Governance Frameworks, developing policy suites, risk registers, and remediation roadmaps, plus conducting maturity assessments and SAMA readiness reviews. Strong stakeholder communication is essential.