GRC Analyst - COBIT Certified

Eram Talent; Dhahran Compound; On-site; SAR 167,400 - 223,200; Full time

Job summary

A leading recruitment firm is seeking a detail-oriented GRC Analyst with COBIT certification to ensure effective IT governance and compliance. The successful candidate will develop GRC frameworks, perform risk assessments, and monitor compliance with regulatory requirements. Key qualifications include a Bachelor's degree in a relevant field and experience in governance frameworks. This role is crucial for managing risks and improving operational excellence within the organization.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Business Administration, or a related field.
• COBIT certification is mandatory.
• Proven experience as a GRC analyst or similar role, preferably in IT governance and risk management.

Responsibilities

• Develop, implement, and maintain GRC frameworks using COBIT principles and best practices.
• Conduct risk assessments and internal control evaluations to identify gaps and recommend improvements.
• Monitor compliance with IT policies, procedures, and regulatory requirements.

Skills

Governance frameworks development

Risk assessments

Analytical skills

Communication skills

Education

Bachelor’s degree in Information Technology

Tools

COBIT

ISO/IEC 35800

Job description

Eram Talent is looking for a detail-oriented and knowledgeable GRC (Governance, Risk, and Compliance) Analyst with COBIT certification to join our team. As a trusted Talent Acquisition partner, we serve various industries by providing top-notch recruitment solutions. The GRC Analyst will play a crucial role in ensuring that our clients' IT governance, risk management, and compliance frameworks are effectively designed, implemented, and maintained.

The successful candidate will work closely with stakeholders to identify and assess risks, develop control frameworks based on COBIT standards, and ensure compliance with relevant regulations and policies. This role involves continuous monitoring, reporting, and improvement of governance processes to ensure operational excellence and risk mitigation.

Key Responsibilities:

• Develop, implement, and maintain GRC frameworks using COBIT principles and best practices.
• Conduct risk assessments and internal control evaluations to identify gaps and recommend improvements.
• Monitor compliance with IT policies, procedures, and regulatory requirements.
• Collaborate with IT and business teams to ensure proper governance and risk mitigation strategies are in place.
• Prepare and present reports to senior management on governance, risk, and compliance statuses.
• Support audit activities and facilitate responses to audit findings related to IT governance.
• Stay updated on new regulations and frameworks affecting IT governance and compliance.
• Promote awareness and understanding of GRC practices across the organization.

• Bachelor’s degree in Information Technology, Computer Science, Business Administration, or a related field.
• Experience in developing and implementing governance frameworks.
• Familiarity with compliance standards (e.g., ISO 38500, COBIT, NIST).
• Experience managing governance-related projects, including the ability to define objectives, allocate resources, and monitor progress.
• Good understanding of IT governance principles and best practices
• COBIT certification is mandatory.
• ISO/IEC 35800 (Corporate Governance Of IT) is preferred
• Proven experience as a GRC analyst or similar role, preferably in IT governance and risk management.
• Strong understanding of IT governance frameworks, especially COBIT.
• Knowledge of compliance requirements, risk management methodologies, and regulatory frameworks.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work collaboratively with cross-functional teams and senior management.
• Detail-oriented with strong organizational skills.
• Experience supporting IT audits and addressing audit findings.
• Knowledge of other governance frameworks (e.g., ISO 27001, ITIL) is a plus.