Product Owner / Business Analyst (GRC)

Synechron; Riyadh; On-site; SAR 300,000 - 480,000; Full time

Job summary

Synechron in Riyadh is seeking an experienced Product Owner / Business Analyst (GRC) to bridge business and technology across risk and compliance initiatives. You will own backlog, define policy libraries, support attestation, audit management, and collaborate with risk, compliance, internal audit, security, and technology teams.

The role requires 5+ years in GRC-related positions and strong stakeholder communication skills.

Qualifications

• 5+ years of experience as a Business Analyst, Product Owner, or GRC Consultant.
• Strong domain expertise in Governance, Risk & Compliance (GRC).
• Hands-on experience with Risk & Compliance Management
• Policy Management
• Control Library Design & Management
• Attestation and Certification Processes
• Audit Management and Issue Remediation
• Regulatory Compliance Frameworks
• Experience translating business requirements into functional solutions.
• Strong stakeholder management and communication skills.
• Experience with Agile/Scrum methodologies.

Responsibilities

• Gather, analyze, and document business requirements for GRC initiatives and platforms.
• Act as Product Owner, managing product backlog, user stories, prioritization, and stakeholder expectations.
• Design and maintain Policy & Control Libraries, ensuring alignment with regulatory and organizational requirements.
• Define and implement Risk & Compliance processes, controls, assessments, and reporting frameworks.
• Manage Attestation & Certification processes, including policy acknowledgements and control attestations.
• Support Audit Management activities, including audit planning, evidence collection, issue tracking, and remediation.
• Collaborate with Risk, Compliance, Internal Audit, Security, and Technology teams.
• Conduct gap assessments and recommend process improvements to strengthen governance and compliance posture.
• Facilitate UAT, stakeholder workshops, and product demonstrations.
• Prepare business requirements, process flows, functional specifications, and regulatory documentation.

Skills

GRC domain

Product Owner

Business Analysis

Risk Management

Audit Management

Regulatory Compliance

Stakeholder Management

Agile Scrum

Tools

ServiceNow GRC

Archer

OneTrust

MetricStream

SAP GRC

Job description

Synechron is currently hiring for an immediate opportunity for the position of Product Owner / Business Analyst (GRC) in Riyadh, KSA.

• Role: Product Owner / Business Analyst (GRC)


• Location: Riyadh, KSA


• Experience: 5+ Years

About Company:

Synechron is a global technology consulting firm that helps leading organizations accelerate digital transformation through innovation, expertise, and agility. With more than 16,700 professionals across around 60 offices in over 22 countries, we combine deep industry knowledge with advanced capabilities in AI, cloud, cybersecurity, and data engineering.

Our regional teams, supported by strategic delivery centers, provide scalable, cost-efficient solutions tailored to local markets. Through our award-winning Synechron FinLabs accelerators and strategic partnerships with AWS, Microsoft, Databricks, Salesforce, and ServiceNow, we enable clients to innovate fast and lead with confidence. For more information on the company, please visit our website or LinkedIn community.

Synechron: Technology and AI Consulting for Business

Synechron is an innovative global consulting firm delivering industry-leading digital solutions to transform and empower businesses.

Diversity, Equity, and Inclusion

Synechron’s Diversity, Equity, and Inclusion (DEI) program, Same Difference, was developed because we believe in a culture of listening, respect, and opportunity.

We each bring unique backgrounds, thoughts, talents, and experiences with us to work every day, and we know that by embracing them, we are creating an even greater Synechron. The best way to build a strong team is to value individual differences. So, it doesn’t matter where you’re from or what you’ve had to do to get here – if you have the skills, enthusiasm, and drive to make your mark, we’ll support you like we support each other. Choose a career with us and let’s pursue innovation, together.

Job Descriptions:

Role Overview:

We are seeking an experienced Product Owner / Business Analyst (GRC) with strong expertise in Risk & Compliance, policy and control framework design, attestation processes, and audit management. The ideal candidate will bridge business and technology teams to deliver enterprise GRC solutions that enhance regulatory compliance, risk visibility, and governance effectiveness.

Key Responsibilities:

• Gather, analyze, and document business requirements for GRC initiatives and platforms.


• Act as Product Owner, managing product backlog, user stories, prioritization, and stakeholder expectations.


• Design and maintain Policy & Control Libraries, ensuring alignment with regulatory and organizational requirements.


• Define and implement Risk & Compliance processes, controls, assessments, and reporting frameworks.


• Manage Attestation & Certification processes, including policy acknowledgements and control attestations.


• Support Audit Management activities, including audit planning, evidence collection, issue tracking, and remediation.


• Collaborate with Risk, Compliance, Internal Audit, Security, and Technology teams.


• Conduct gap assessments and recommend process improvements to strengthen governance and compliance posture.


• Facilitate UAT, stakeholder workshops, and product demonstrations.


• Prepare business requirements, process flows, functional specifications, and regulatory documentation.

Required Skills & Experience:

• 5+ years of experience as a Business Analyst, Product Owner, or GRC Consultant.


• Strong domain expertise in Governance, Risk & Compliance (GRC).


• Hands-on experience with:


• Risk & Compliance Management


• Policy Management


• Control Library Design & Management


• Attestation and Certification Processes


• Audit Management and Issue Remediation


• Regulatory Compliance Frameworks


• Experience translating business requirements into functional solutions.


• Strong stakeholder management and communication skills.


• Experience with Agile/Scrum methodologies.

Preferred Qualifications:

• Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, MetricStream, or SAP GRC.


• Knowledge of regulatory frameworks such as ISO 27001, NIST, COBIT, SOX, PCI-DSS, and related compliance standards.


• Professional certifications such as CISA, CRISC, CGEIT, CSPO, or CBAP are advantageous.