Head of Compliance

Tibbiyah Holding; Riyadh; On-site; SAR 350,000 - 550,000; Full time

Job summary

Tibbiyah Holding is seeking a Head of Compliance to lead and continuously enhance its enterprise-wide compliance program across its healthcare operations and subsidiaries in Saudi Arabia. You will ensure alignment with Saudi laws, CMA requirements, and governance standards while promoting ethical business practices.

Reporting to the CEO, you will provide strategic leadership, oversee risk assessments, policy development, and cross-functional guidance to ensure regulatory obligations are met and

Qualifications

• Bachelor's degree in Law or related discipline with professional compliance certification required.
• Minimum 7 years of relevant experience in compliance or regulatory affairs, including 3 years leading a program.
• Strong knowledge of Saudi laws, CMA regulations, and corporate governance requirements.

Responsibilities

• Lead development and continuous improvement of enterprise-wide compliance framework, policies, and controls.
• Oversee regulatory obligations registers, governance structures, and compliance reporting.
• Ensure adherence to Saudi laws including healthcare, data protection, and competitive practices.
• Direct risk assessments, develop Code of Conduct, and oversee third-party due diligence.
• Provide strategic guidance to cross-functional teams and report to CEO and Board committees.

Skills

Legal compliance

Regulatory awareness

Leadership

Arabic & English

Education

Bachelor's degree in Law or related field

Professional compliance certification

Job description

The Head of Compliance is responsible for leading, implementing, and continuously enhancing the Company's enterprise-wide compliance program across its healthcare operations and subsidiaries. The role ensures alignment with applicable Saudi laws, healthcare regulations, Capital Market Authority (CMA) requirements, corporate governance standards, and ethical business practices.

Reporting directly to the Chief Executive Officer (CEO), the Head of Compliance provides strategic compliance leadership and serves as a trusted adviser to executive management and business stakeholders in identifying, assessing, and mitigating regulatory and compliance risks. The role promotes a strong culture of integrity, transparency, accountability, and ethical conduct throughout the organization.

1. Job Summary

The Head of Compliance is responsible for leading, implementing, and continuously enhancing the Company's enterprise-wide compliance program across its healthcare operations and subsidiaries. The role ensures alignment with applicable Saudi laws, healthcare regulations, Capital Market Authority (CMA) requirements, corporate governance standards, and ethical business practices.

Reporting directly to the Chief Executive Officer (CEO), the Head of Compliance provides strategic compliance leadership and serves as a trusted adviser to executive management and business stakeholders in identifying, assessing, and mitigating regulatory and compliance risks. The role promotes a strong culture of integrity, transparency, accountability, and ethical conduct throughout the organization.

2. Education

• Bachelor's degree in Law, Compliance, Business Administration, Finance, Accounting, Risk Management, Healthcare Administration, or a related discipline, or equivalent professional experience.
• A recognized professional certification in Compliance, Internal Audit, Risk Management, Fraud Examination, Data Privacy, or Corporate Governance.
• Minimum of 7 years of relevant experience in compliance, ethics, legal, governance, risk management, or regulatory affairs, including at least 3 years leading a compliance program.
• Demonstrated experience in designing, implementing, and managing risk-based compliance programs within regulated organizations.
• Strong knowledge of Saudi corporate governance requirements, CMA regulations, and regulatory obligations applicable to Tadawul-listed companies.
• Practical experience in healthcare or medical-technology compliance, including healthcare-professional interactions, tenders, public-sector customers, distributors, sponsorships, donations, and promotional practices.

3. Job Responsibilities

• Lead the development, implementation, and continuous improvement of the Company's enterprise-wide, risk-based compliance framework, policies, procedures, and internal controls.
• Establish and oversee annual compliance plans, governance structures, regulatory obligations registers, and compliance reporting mechanisms.
• Ensure adherence to applicable Saudi laws and regulations, including healthcare, medical-device, data-protection, competition, anti-bribery, corporate governance, and capital-market requirements.
• Oversee compliance with CMA regulations and Tadawul continuing obligations, including regulatory disclosures, insider information, conflicts of interest, related-party transactions, and governance reporting.
• Direct compliance risk assessments to identify, evaluate, prioritize, and mitigate potential regulatory and ethical risks across the Company and its subsidiaries.
• Develop, implement, and maintain the Company's Code of Conduct and policies governing conflicts of interest, gifts and hospitality, third-party relationships, healthcare-professional interactions, sponsorships, donations, market conduct, and records management.
• Provide strategic and practical compliance guidance to commercial, tendering, procurement, clinical, quality, regulatory, and supply-chain functions.
• Oversee third-party compliance programs, including risk-based due diligence, contracting standards, onboarding, monitoring, renewal, and remediation processes for distributors, agents, suppliers, consultants, and other intermediaries.
• Lead the development and implementation of compliance training and awareness programs for employees, executives, Board members, and relevant third parties.
• Oversee confidential reporting and whistleblowing mechanisms, ensuring appropriate investigation of reported concerns, protection against retaliation, documentation of findings, and implementation of corrective actions.
• Establish and oversee compliance monitoring, testing, data analytics, internal control reviews, and corrective-action tracking to assess compliance effectiveness.
• Collaborate with Internal Audit, Legal, Finance, HR, Quality, and Data Protection functions to strengthen the Company's overall compliance and internal control environment.
• Monitor regulatory developments, assess their potential impact on business operations, and recommend appropriate compliance measures.
• Prepare and present periodic compliance reports and dashboards to the CEO, executive management, and relevant Board committees, highlighting key risks, incidents, root causes, outstanding corrective actions, and program effectiveness.
• Promote and reinforce a strong culture of integrity, ethical conduct, accountability, and regulatory compliance throughout the organization.
• Escalate material compliance concerns and regulatory risks directly to the CEO and, where appropriate, relevant Board committees in accordance with approved governance procedures.
• Drive continuous improvement initiatives to enhance the effectiveness, efficiency, and maturity of the Company's compliance program.

4. Skills and Abilities

• Regulatory Knowledge: Strong understanding of Saudi laws, CMA regulations, corporate governance requirements, and healthcare compliance standards.
• Leadership and Strategic Thinking: Ability to lead enterprise-wide compliance initiatives, establish strategic priorities, and influence organizational decision-making.
• Compliance Risk Management: Proven ability to identify, assess, mitigate, and monitor regulatory, operational, and ethical compliance risks.
• Analytical and Problem-Solving Skills: Strong analytical capabilities with the ability to evaluate complex regulatory matters and develop practical, risk-based solutions.
• Executive Communication: Excellent communication, presentation, and stakeholder management skills, with the ability to advise the CEO, senior executives, and Board committees.
• Compliance Systems and Technology: Proficiency in compliance management systems, screening tools, case management platforms, data analytics, and performance reporting.
• Investigation and Decision-Making: Ability to oversee sensitive compliance investigations, exercise sound professional judgment, and recommend appropriate corrective actions.
• Planning and Organization: Strong organizational and time-management skills, with the ability to work independently, manage multiple priorities, and meet deadlines.
• Integrity and Professional Ethics: High standards of integrity, confidentiality, independence, and accountability, with the confidence to elevate material compliance concerns.
• Language Proficiency: Professional fluency in Arabic and English, both written and spoken.