GRC Product Owner | Risk & Compliance Leader

Synechron; Riyadh; On-site; SAR 300,000 - 480,000; Full time

Job summary

Synechron in Riyadh is seeking an experienced Product Owner / Business Analyst (GRC) to bridge business and technology across risk and compliance initiatives. You will own backlog, define policy libraries, support attestation, audit management, and collaborate with risk, compliance, internal audit, security, and technology teams.

The role requires 5+ years in GRC-related positions and strong stakeholder communication skills.

Qualifications

• 5+ years of experience as a Business Analyst, Product Owner, or GRC Consultant.
• Strong domain expertise in Governance, Risk & Compliance (GRC).
• Hands-on experience with Risk & Compliance Management
• Policy Management
• Control Library Design & Management
• Attestation and Certification Processes
• Audit Management and Issue Remediation
• Regulatory Compliance Frameworks
• Experience translating business requirements into functional solutions.
• Strong stakeholder management and communication skills.
• Experience with Agile/Scrum methodologies.

Responsibilities

• Gather, analyze, and document business requirements for GRC initiatives and platforms.
• Act as Product Owner, managing product backlog, user stories, prioritization, and stakeholder expectations.
• Design and maintain Policy & Control Libraries, ensuring alignment with regulatory and organizational requirements.
• Define and implement Risk & Compliance processes, controls, assessments, and reporting frameworks.
• Manage Attestation & Certification processes, including policy acknowledgements and control attestations.
• Support Audit Management activities, including audit planning, evidence collection, issue tracking, and remediation.
• Collaborate with Risk, Compliance, Internal Audit, Security, and Technology teams.
• Conduct gap assessments and recommend process improvements to strengthen governance and compliance posture.
• Facilitate UAT, stakeholder workshops, and product demonstrations.
• Prepare business requirements, process flows, functional specifications, and regulatory documentation.

Skills

GRC domain

Product Owner

Business Analysis

Risk Management

Audit Management

Regulatory Compliance

Stakeholder Management

Agile Scrum

Tools

ServiceNow GRC

Archer

OneTrust

MetricStream

SAP GRC

Job description

Synechron in Riyadh is seeking an experienced Product Owner / Business Analyst (GRC) to bridge business and technology across risk and compliance initiatives. You will own backlog, define policy libraries, support attestation, audit management, and collaborate with risk, compliance, internal audit, security, and technology teams.

The role requires 5+ years in GRC-related positions and strong stakeholder communication skills.