Job Purpose
The Compliance Officer organizes and monitors adherence to company rules, policies and procedures across the head office and the project sites of a construction and oil & gas contractor. The role ensures the company meets Saudi regulatory requirements and its contractual obligations to clients, including major O&G operators. It also maintains effective governance and internal controls, and reports compliance and risk levels transparently to management.
Key Responsibilities
1. Policies & Procedures
- Prepare, review and update company Policies & Procedures, including project execution, procurement, subcontracting and site-control procedures.
- Maintain a central policy register with version control, and communicate policies to head office and site teams.
- Align policies with Saudi laws, client requirements and management system standards (ISO 9001, 14001, 45001).
2. Regulatory, Contractual & Client Compliance
- Verify that departments and project sites comply with internal regulations, instructions and applicable laws.
- Monitor compliance with clients’ contractor requirements, such as contractor prequalification, HSE requirements and local content (IKTVA) obligations.
- Track the validity of company licences, permits, classifications and registrations: MOMRAH contractor classification, CR, Chamber, Zakat/VAT, GOSI and Nitaqat.
- Review subcontractor and supplier compliance, and support due diligence before engagement.
- Conduct periodic compliance reviews and site spot checks, and follow up on corrective actions.
3. Governance
- Follow up on the implementation of the governance framework across the company and its projects.
- Support anti-bribery, conflict-of-interest and code-of-conduct programs, particularly in tendering and procurement.
4. Roles, Responsibilities & Authorities
- Document Roles & Responsibilities and the Delegation of Authority (DoA) Matrix for the head office and project organizations.
- Identify overlaps or gaps in responsibilities, and recommend clear segregation of duties.
5. Audit Follow-up
- Track findings from Internal Audit, client audits and ISO certification audits until they are fully closed.
- Coordinate action plans with process owners and project managers, and verify that the fixes are effective.
6. Compliance & Risk Reporting
- Prepare periodic reports on compliance levels and risks for senior management.
- Maintain a compliance risk register covering the head office and project sites, with recommended mitigations.
- Promote a compliance culture through awareness sessions for office and site staff.
Key Performance Indicators (KPIs)
- Percentage of policies reviewed and updated on schedule
- Percentage of internal, client and ISO audit findings closed on time
- Zero lapses in company licences, classifications or client prequalification
- Number of compliance breaches and repeat findings, and client penalties avoided
- Timeliness and quality of compliance and risk reports
Qualifications & Experience
- Bachelor’s degree in Law, Business Administration, Engineering or a related field.
- 3–5 years of experience in compliance, governance, audit or risk, preferably with a construction or oil & gas contractor.
- Experience with the contractor requirements and audits of major O&G clients is a strong advantage.
- Professional certification preferred, such as CCEP, ICA, CIA, GRCP or ISO Lead Auditor.
- Sound knowledge of Saudi regulations, including the Companies Law, Labor Law and Government Tenders & Procurement Law, as well as governance practices.