GRC Specialist (IT Risk & IT Compliance) - Immediate Joining

Müller's Solutions; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Benefits offered by this job

Competitive salary

Benefits package

Exciting projects

Job summary

Müller\'s Solutions in Riyadh seeks an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. You will deliver outputs across governance, risk, compliance, and IT process improvement workstreams.

The role requires 7–10 years in IT GRC with strong knowledge of the SAMA Cybersecurity Framework and proven ability to implement governance frameworks and policy suites. You will collaborate with IT teams and stakeholders in the Saudi financial sector.

Qualifications

• 7–10 years in IT GRC, IT Risk, or IT Compliance.
• Strong knowledge of SAMA Cybersecurity Framework.
• Experience delivering IT governance frameworks and policy suites.
• Proven risk assessment and risk register management.
• Familiarity with Internal Audit closure processes and reporting.
• Maturity assessments aligned to NIST, ISO 27001, SAMA.
• Excellent documentation and stakeholder communication.
• Saudi regulatory sector experience preferred.

Responsibilities

• Develop and deliver the Project Charter and Project Plan.
• Conduct current state and maturity assessments and report findings.
• Design IT Governance Framework aligned to SAMA.
• Develop IT policies and procedures.
• Establish Governance Committee Charters and Dashboards.
• Perform SAMA Readiness Assessments and risk remediation.
• Deliver knowledge transfer sessions to internal stakeholders (up to 10).

Skills

IT GRC

SAMA Framework

Risk assessment

Policy development

Documentation

Stakeholder communication

Audit closure

Job description

Müller's Solutions is seeking an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. The candidate will be responsible for delivering a structured set of project outputs across governance, risk, compliance, and IT process improvement workstreams.

Key Responsibilities

• Develop and deliver the Project Charter & Project Plan
• Conduct current state and maturity assessments and produce formal reports
• Design and implement an IT Governance Framework aligned to SAMA requirements
• Develop a full set of IT policies and procedures
• Define the IT Operating Model and RACI Matrix
• Build and maintain a Control Catalog mapped to SAMA
• Establish Governance Committee Charters and Dashboards
• Conduct Gap Assessments and produce a remediation roadmap
• Perform SAMA Readiness Assessments
• Complete a Risk Assessment for Information Assets
• Develop and maintain Risk Registers and Treatment Plans
• Support IT teams in closing SAMA and Internal Audit observations
• Produce Cybersecurity Compliance Reports and IT Process Performance Reports
• Deliver Knowledge Transfer Sessions to internal stakeholders (up to 10 sessions)

Requirements

• Minimum 7-10 years in IT GRC, IT Risk, or IT Compliance roles
• Strong working knowledge of SAMA Cybersecurity Framework
• Experience delivering IT governance frameworks and policy suites
• Proven track record in risk assessment and risk register management
• Familiarity with Internal Audit closure processes and compliance reporting
• Experience in maturity assessments aligned to recognised frameworks (NIST, ISO 27001, SAMA)
• Excellent documentation and stakeholder communication skills
• Prior experience in the Saudi Arabian financial or regulated sector is highly preferred

Benefits

Why Join Us:

• Opportunity to work with a talented and passionate team.
• Competitive salary and benefits package.
• Exciting projects and innovative work environment.