GRC Manager (Holding) Aroma City Group Cyber Security 12:05

AimGulf; Riyadh; On-site; SAR 246,000 - 335,000; Full time

Job summary

AimGulf is seeking a seasoned GRC Manager to build and lead the governance, risk, and compliance framework across the group and portfolio companies. The role collaborates with the CIO to protect value and support informed investment decisions.

You will drive the group-wide GRC program, ensure regulatory compliance in Saudi Arabia, and deliver risk dashboards to the Board and Audit Committees. Strong English and Arabic communication are required.

Qualifications

• Bachelor's degree in Finance, Accounting or Business Administration.
• 7+ years of experience in GRC and/or internal audit.
• Big 4 experience is a strong plus.
• Knowledge of CMA, MISA, ZATCA and Ministry of Commerce regulations is desirable.

Responsibilities

• Build, implement and maintain the group-wide GRC framework (policies, procedures, delegation of authority).
• Lead enterprise risk management; identify, assess and monitor key risks and maintain the risk register.
• Ensure compliance with Saudi regulations and internal governance standards.
• Plan and carry out risk-based internal reviews and follow up on audit findings.

Skills

GRC framework

Internal audit

Regulatory knowledge

Risk-based reviews

Reporting & dashboards

Education

Bachelor's degree in Finance/Accounting/Business Admin

Job description

Our client is a leading large-scale company in the Holding sector. They are hiring an experienced GRC Manager to build and lead the governance, risk and compliance framework across the group and its portfolio companies. The role works closely with the Chief Investment Officer to protect value and support well-informed investment decisions.

Key Responsibilities:

• Build, put in place and maintain the group-wide GRC framework, including policies, procedures and delegation-of-authority matrices.
• Lead enterprise risk management: identify, assess and monitor key risks across the holding company and its portfolio, and keep the risk register up to date.
• Make sure the group complies with Saudi regulations (CMA, MISA, ZATCA, Ministry of Commerce) and with internal governance standards.
• Plan and carry out risk-based internal reviews, and follow up on audit findings until they are fixed.
• Support risk and governance due diligence on new investments, acquisitions and divestments.
• Prepare GRC reports and dashboards for the CIO, the Board and the Audit and Risk Committees.
• Promote a risk-aware culture across the group through training and by advising portfolio companies.

Experience Required:

• 7 plus years of experience in GRC and/or internal audit.
• Former Big 4 experience is a strong plus.

Education Qualifications:

Bachelor's degree in Finance, Accounting or Business Administration

Skills Required:

• Governance, Risk and Compliance (GRC) framework
• Internal audit
• CMA, MISA, ZATCA, Ministry of Commerce regulations
• Risk-based internal reviews
• Reporting and dashboards

Languages:

Fluent English and Arabic

Employment / Job Type:

Full Time

Salary:

SAR 22k to 30k monthly package

About the Company:

A recruitment consultancy operating across the Levant and Gulf, specialising in headhunting for middle and senior management roles. It works with employers in finance, healthcare, manufacturing, construction, technology and retail, running structured search assignments from requirement definition through to candidate shortlisting. Offices support clients throughout the Middle East.

Company Industry:

Holding

Department / Functional Area:

Governance, Risk and Compliance

Closing Date:

Not mentioned (apply as soon as possible)