Information Technology Governance, Risk, and Compliance - Senior Specialist

Abdul Latif Jameel Enterprises; Jeddah; On-site; SAR 120,000 - 150,000; Full time

Job summary

A leading organization in technology management is seeking a Technology Governance, Risk, and Compliance Senior Specialist in Jeddah. The role involves managing GRC activities, developing risk frameworks, and ensuring compliance with regulations. Ideal candidates will have at least 5 years of relevant experience, strong analytical skills, and the ability to communicate effectively with stakeholders. A Bachelor's degree in a related field is required, along with certifications in governance or compliance.

Qualifications

• Minimum of 5 years of experience in Technology governance, risk management or compliance.
• Good understanding of governance frameworks like COBIT, ISO 27001, NIST Cybersecurity Framework.
• Fluency in English; proficiency in Arabic is a plus.

Responsibilities

• Manage Technology GRC activities and policies.
• Develop and implement risk management frameworks.
• Conduct regular risk assessments.
• Collaborate with stakeholders to implement controls.

Skills

Technology governance frameworks

Risk management

Compliance requirements

Analytical skills

Communication skills

Stakeholder engagement

Education

Bachelor's degree in Information Technology, Computer Science or related field

Professional certification in GRC (e.g., CISA, CISM, CRISC, CISSP)

Job description

The Technology Governance, Risk, and Compliance (GRC) Senior Specialist at ALJ Enterprises, you will play a key role in leading the effective management and oversight of Technology governance, risk management, and compliance activities across the organization. You will be responsible for developing and maintaining a robust framework for identifying, assessing, and mitigating Technology-related risks, as well as ensuring compliance with relevant regulations and industry standards.

You will contribute to the continuous improvement and optimization of Technology GRC processes and procedures to enhance the overall security posture of the organization.

Responsibilities

• :Manage Technology GRC activities, including the development and maintenance of ALJ Enterprises policies and procedures, in collaboration with ALJ Enterprises and ALJ Corporate teams
• .Support the development and implementation of an Technology GRC framework, policies, and procedures to manage Technology -related risks effectively and ensure compliance with regulatory requirements and industry standards
• .Assist in establishing and maintaining an Technology risk management program that includes risk identification, assessment, prioritization, mitigation, and monitoring
• .Conduct regular Technology and Digital risk assessments and gap analyses to identify potential vulnerabilities and areas for improvement
• .Collaborate with Technology, Digital, Innovation, and business stakeholders to define and implement controls and mitigation strategies to address identified risks
• .Monitor regulatory developments and industry trends to ensure ongoing compliance with relevant laws, regulations, and best practices and elevate any potential issues as needed
• .Assist in the execution of Technology compliance activities, including audits, assessments, and certifications, to validate adherence to established policies and standards
• .Provide guidance and support to Technology teams and business units on GRC-related matters, including risk identification, assessment methodologies, and compliance requirements
• .Support the development and delivery of training programs and awareness initiatives in collaboration with IT corporate and HR to promote a culture of compliance and risk awareness across the organization
• .Assist in managing relationships with internal and external auditors, regulators, and other third-party stakeholders involved in Technology GRC activities
• .Participate in incident response and remediation efforts in coordination with relevant stakeholders to address security incidents and compliance violations

Requirements

• :Bachelor's degree in Information Technology, Computer Science, Business Administration, or related field. A professional certification in Technology governance, risk management, or compliance (e.g., CISA, CISM, CRISC, CISSP) is a plus
• .Minimum of 5 years of experience in Technology governance, risk management, compliance, or related fields
• .Good understanding of Technology governance frameworks, standards, and best practices (e.g., COBIT, ISO 27001, NIST Cybersecurity Framework)
• .Experience in participating in Technology GRC programs in complex organizational environments
• .Knowledge of regulatory requirements and compliance frameworks relevant to the organization's industry and geographical footprint
• .Strong analytical, problem-solving, and decision-making skills, with the ability to assess and prioritize risks effectively
• .Strong communication and interpersonal skills, with the ability to effectively engage and influence stakeholders at all levels of the organization
• .Ability to work collaboratively in a cross-functional environment and effectively manage relationships with internal and external stakeholders
• .Fluency in English is required, and proficiency in Arabic is a plus