GRC Director: Governance, Risk & Compliance

webook.com; Riyadh; On-site; SAR 600,000 - 1,000,000; Full time

Job summary

webook.com in Saudi Arabia seeks a Director of Governance, Risk & Compliance to build and lead the GRC function across markets. The role will design policy, risk registers, and controls to support growth and international expansion, embedding governance in a fast-moving environment.

The successful candidate will drive enterprise risk management, ensure regulatory compliance, and partner with leadership to establish a scalable governance culture across the organization.

Qualifications

• 10+ years of experience in governance, risk, compliance, or a related field.
• Demonstrated experience building or significantly scaling a GRC function.
• Strong knowledge of regulatory frameworks relevant to tech platforms, marketplaces, or e-commerce.
• Familiarity with data privacy regulations, including PDPL and GDPR.
• Experience operating across multiple markets, ideally within the MENA region.
• Excellent stakeholder management and executive communication skills.
• Relevant certifications are a plus (e.g. CISA, CRISC, CISM, ICA).
• Comfortable with ambiguity and able to move fast in a high-growth environment.

Responsibilities

• Design and implement webook.com's enterprise governance framework, including policies, approval authorities, decision-making protocols, committees, reporting cadences, and escalation paths.
• Support the company's transition from founder-led/startup-style operations to a more structured governance model without slowing down execution unnecessarily.
• Establish clear accountability structures across departments, markets, and leadership forums.
• Develop and maintain a company-wide policy framework and policy library covering key operational, financial, legal, technology, data, people, and regulatory areas.
• Support board governance requirements by preparing clear, structured reporting on key risks, compliance matters, governance gaps, and mitigation plans.
• Work with executive leadership to ensure board decisions, actions, and follow-ups are tracked and implemented.
• Help establish governance routines such as risk committees, compliance reviews, policy approval processes, and management reporting cycles.
• Build and own the company's Enterprise Risk Management framework from scratch.
• Develop and maintain the enterprise risk register, including strategic, operational, financial, regulatory, technology, cyber, third-party, reputational, and market-specific risks.
• Define risk assessment methodologies, scoring criteria, risk ownership, risk appetite, escalation thresholds, and mitigation planning processes.
• Partner with business leaders to identify, assess, prioritize, and manage risks across functions and geographies.
• Embed risk management into business planning, international expansion, product launches, vendor selection, major commercial deals, and operational decision-making.
• Provide regular risk reporting to executive leadership and the Board, including key risk indicators, emerging risks, mitigation progress, and areas requiring attention.
• Ensure risk management is practical, business-focused, and suitable for a fast-moving growth environment.

Skills

Governance

Risk management

Compliance

GRC

Stakeholder management

Job description

webook.com in Saudi Arabia seeks a Director of Governance, Risk & Compliance to build and lead the GRC function across markets. The role will design policy, risk registers, and controls to support growth and international expansion, embedding governance in a fast-moving environment.

The successful candidate will drive enterprise risk management, ensure regulatory compliance, and partner with leadership to establish a scalable governance culture across the organization.