Governance, Risk & Compliance Specialist

Al Jazirah Rent a Car; Riyadh; On-site; SAR 150,000 - 200,000; Full time

Job summary

A leading rental company in Riyadh is seeking a Governance, Risk & Compliance (GRC) Specialist. This role involves developing and monitoring governance frameworks, compliance with laws, and managing organizational risks. The ideal candidate has 8-10 years of experience in GRC and holds a relevant bachelor's degree, alongside professional certifications. The position offers an opportunity to support management in ensuring accountability and operational excellence in a dynamic environment.

Qualifications

• 8–10 years in a GRC role is required.
• Experience with regulatory frameworks, risk assessments, and audits is essential.
• Professional certifications in GRC-related fields are preferred.

Responsibilities

• Support development of corporate governance policies and procedures.
• Identify, assess, and manage risks across the organization.
• Monitor compliance with laws, regulations and company policies.

Skills

Governance frameworks knowledge

Risk management frameworks (ERM)

Compliance frameworks

Internal controls knowledge

Ability to conduct risk assessments

Education

Bachelor’s degree in a relevant field

Tools

CISA

CISM

CRISC

ICA

Job description

The Governance, Risk & Compliance (GRC) Specialist is responsible for developing, implementing, and monitoring the company’s governance framework, ensuring compliance with applicable laws and regulations, and managing risks across all business operations. This role plays a key part in supporting management to maintain transparency, accountability, and operational excellence while ensuring alignment with corporate objectives and regulatory requirements.

Key Responsibilities

• Governance:
  • Support the development and implementation of corporate governance policies and procedures.
  • Ensure company policies are aligned with local labor law, regulatory requirements, and best practices.
  • Prepare reports for senior management on compliance and governance matters.
• Risk Management:
  • Identify, assess, and monitor organizational risks (operational, financial, compliance, reputational).
  • Recommend risk mitigation strategies and follow up on their implementation.
  • Conduct risk assessments for new projects, contracts, and initiatives.
• Compliance:
  • Monitor adherence to internal policies, regulatory requirements, and industry standards.
  • Develop and maintain the company’s compliance framework and reporting mechanisms.
  • Conduct compliance audits and report findings with corrective action plans.
  • Coordinate with external auditors and regulatory bodies as needed.
• Training & Awareness:
  • Provide training sessions and awareness programs to employees on compliance, ethics, and governance standards.
  • Act as a point of contact for compliance-related inquiries.

Education

• Bachelor’s degree in a relevant field (e.g., Law, Business Administration, Finance, Risk Management, Compliance).
• Professional certifications significantly help for example, CISA, CISM, CRISC, ICA (International Compliance Association), etc.

Experience

• 8–10 years in a GRC role.
• Experience working with regulatory frameworks, risk assessments, audits, policies & procedures.

Technical & Functional Skills

• Strong knowledge of governance frameworks, risk management frameworks (ERM), compliance frameworks and internal controls.
• Ability to conduct risk assessments (identification, mitigation, monitoring), maintain risk registers.
• Designing, implementing, monitoring compliance programs; setting policies, procedures, control frameworks.
• Audit coordination (internal & external), reporting to senior management and possibly regulators.
• Knowledge of public?company governance obligations (e.g., disclosures, audit committees, board oversight).
• Understanding of external audit, internal controls over financial reporting.
• Experience reporting to or interfacing with a board of directors or audit/risk committee.
• Ability to tailor compliance and risk frameworks to investor, regulator, and public?market expectations.
• Perhaps familiarity with investor relations or external stakeholder communications regarding governance & risk.