Senior IT GRC & Audit Analyst

Alhugayetjob; Dhahran Compound; On-site; SAR 134,000 - 223,000; Full time

Benefits offered by this job

Competitive salary and overbase

Health insurance

Annual leave & public holidays

Annual flight tickets for expats

Job summary

Al Hugayet Group seeks an IT Governance, Risk and Compliance professional to support GRC activities in the oil and gas sector in Dhahran.

Role requires 2–5 years in IT GRC or IT auditing, with knowledge of COBIT/ITIL/ISO frameworks and strong policy documentation skills. You will assist in interpreting policies and presenting findings to stakeholders while collaborating across IT and business teams.

Qualifications

• 2–5 years of experience in IT governance, risk management, compliance (GRC), or IT auditing.
• Familiar with COBIT, ITIL, ISO/IEC 38500, or NIST frameworks.
• Ability to interpret and implement corporate policies, legal requirements and industry regulations.
• Strong professional writing skills for policy documentation.

Responsibilities

• Apply industry standards to organizational processes.
• Differentiate between vulnerabilities and business risks.
• Present findings clearly to management.
• Review documentation to identify compliance gaps with high precision.
• Provide corrective actions and solutions, not just findings.
• Maintain neutral, evidence-based approach during audits.

Skills

CISA

ITIL Foundation

COBIT 2019

Power BI

Tableau

Regulatory knowledge

Cross-functional collaboration

Education

Bachelor degree in Computer Science / Information Technology / AI or related field

Tools

ServiceNow

Archer

MetricStream

Job description

Al Hugayet Group seeks an IT Governance, Risk and Compliance professional to support GRC activities in the oil and gas sector in Dhahran.

Role requires 2–5 years in IT GRC or IT auditing, with knowledge of COBIT/ITIL/ISO frameworks and strong policy documentation skills. You will assist in interpreting policies and presenting findings to stakeholders while collaborating across IT and business teams.