IT GRC Specialist: Risk, Compliance & SAMA Readiness

Muller's Solutions; Riyadh; On-site; SAR 420,000 - 640,000; Full time

Job summary

Müller’s Solutions in Riyadh is seeking a seasoned GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance program on a full-time, on-site basis. The role focuses on delivering governance, risk, compliance outputs, and IT process improvements across the organization.

The ideal candidate has 7–10 years in IT GRC, strong SAMA framework knowledge, and a proven track record in risk assessments and policy development. Saudi regulatory experience is highly valued.

Qualifications

• 7–10 years in IT GRC, IT Risk, or IT Compliance roles.
• Strong knowledge of SAMA Cybersecurity Framework.
• Experience delivering IT governance frameworks and policy suites.
• Proven track record in risk assessment and risk register management.
• Familiarity with Internal Audit closure processes and compliance reporting.

Responsibilities

• Develop and deliver the Project Charter & Project Plan.
• Conduct current state and maturity assessments and produce formal reports.
• Design and implement an IT Governance Framework aligned to SAMA requirements.
• Develop a full set of IT policies and procedures.
• Define the IT Operating Model and RACI Matrix.
• Build and maintain a Control Catalog mapped to SAMA.
• Establish Governance Committee Charters and Dashboards.
• Conduct Gap Assessments and produce a remediation roadmap.
• Perform SAMA Readiness Assessments.
• Complete a Risk Assessment for Information Assets.
• Develop and maintain Risk Registers and Treatment Plans.
• Support IT teams in closing SAMA and Internal Audit observations.
• Produce Cybersecurity Compliance Reports and IT Process Performance Reports.
• Deliver Knowledge Transfer Sessions to internal stakeholders (up to 10 sessions).

Skills

IT GRC

Risk assessment

Policy development

Stakeholder communication

Governance

Job description

Müller’s Solutions in Riyadh is seeking a seasoned GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance program on a full-time, on-site basis. The role focuses on delivering governance, risk, compliance outputs, and IT process improvements across the organization.

The ideal candidate has 7–10 years in IT GRC, strong SAMA framework knowledge, and a proven track record in risk assessments and policy development. Saudi regulatory experience is highly valued.