Governance, Risk & Compliance (GRC) Officer

Riyadh Cement Company; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Job summary

Riyadh Cement Company seeks an experienced GRC Leader to coordinate governance, risk and compliance across the organization. You will manage controls, policies and reporting to executives, while ensuring alignment with local regulations and international standards.

The role requires strong COSO/ISO knowledge, a Saudi-listed or industrial background preferred, and fluency in Arabic and English. This is a full-time, on-site position in Riyadh.

Qualifications

• Bachelor’s degree in Risk Management, Business Administration, Finance, Accounting, Law, Engineering, or Information Systems.
• Minimum of 5 years of relevant experience, with at least 3 years in GRC/internal controls; Saudi-listed or industrial enterprise preferred.
• A recognized professional certification is required (e.g., GRCP, CRMA, CRM, CCEP, ISO 31000, ISO 37301).
• Strong working knowledge of COSO ERM, ISO 31000, and ISO 37301.
• Proficiency in ERP GRC modules, MS Office, and reporting tools; full professional fluency in Arabic and English (written and spoken).

Responsibilities

• Coordinate GRC activities across departments and provide decision-ready reporting to management.
• Maintain risk registers, monitor internal controls and track treatment plans.
• Manage legal case tracking and deliver monthly status reports to senior leadership.
• Develop, maintain, and implement GRC policies, methodologies, and templates.
• Maintain the enterprise risk register and facilitate risk assessments with department leads.
• Track compliance obligations, evidence of compliance, and remediation plans.
• Review internal control designs and collaborate with Internal Audit.
• Prepare GRC dashboards and materials for executive committees.

Skills

GRC

Internal controls

Risk management

Stakeholder communication

Education

Bachelor's degree (Risk Management, Business Administration, Finance, Accounting, Law, Engineering, or Information Systems)

Tools

ERP GRC modules

MS Office

Reporting tools

Job description

Key Responsibilities:

• you will act as a second-line oversight function. You will coordinate GRC activities across departments, maintain reliable records, monitor internal controls and treatment plans, manage legal case tracking, and provide decision-ready reporting to management and governance bodies.

• GRC Framework & Governance: Support the development, maintenance, and controlled implementation of GRC policies, methodologies, and templates.
• Enterprise Risk Management (ERM): Maintain the enterprise risk register, facilitate risk assessments with department leads, and track risk treatment action plans.
• Compliance Management: Maintain the compliance obligations register, track evidence of compliance, and coordinate remediation plans for any identified gaps.
• Internal Controls Monitoring: Review internal control designs and operating status, follow up on remediation, and coordinate closely with Internal Audit.
• Executive & Committee Reporting: Prepare GRC dashboards, summaries, and materials for the Risk Executive Committee, Audit Committee, and CEO Office.
• Legal Case Coordination: Maintain the company legal case register, coordinate with external law firms, and deliver monthly status reports to the CEO.

Qualifications & Requirements:

Education: Bachelor’s degree in Risk Management, Business Administration, Finance, Accounting, Law, Engineering, or Information Systems.

Experience: Minimum of 5 years of relevant experience, with at least 3 years directly in GRC/internal controls. (Experience in a Saudi-listed or industrial enterprise is preferred).

Certifications: A recognized professional certification is required (e.g., GRCP, CRMA, CRM, CCEP, ISO 31000, ISO 37301).

Framework Knowledge: Strong working knowledge of COSO ERM, ISO 31000, and ISO 37301.

Systems & Languages: Proficiency in ERP GRC modules, MS Office, and reporting tools. Full professional fluency in Arabic and English (written and spoken).