أخصائي أول حوكمة ومخاطر والتزام (GRC)

Senior Governance, Risk & Compliance (GRC) Specialist

Location: Makkah, Saudi Arabia

Work Arrangement: Full-time | On-site

Contract Duration: 12 Months

Experience Required: 3–6 Years

Job Overview

innovaDigits is seeking experienced Senior Governance, Risk & Compliance (GRC) Specialists for a 12-month, on-site engagement in Makkah, Saudi Arabia, to work with Semi-Government Entity related to Hajj Services.

The ideal candidates will have hands-on experience in enterprise-wide governance, risk management, and regulatory compliance, with the ability to support the development, implementation, monitoring, and continuous improvement of organizational GRC frameworks, policies, and controls.

Key Responsibilities

• Develop, implement, and review corporate governance frameworks, policies, procedures, and organizational guidelines.
• Identify, assess, monitor, and report enterprise-wide risks, including operational, strategic, financial, and regulatory risks.
• Develop, maintain, and periodically update enterprise and departmental Risk Registers.
• Evaluate the effectiveness of internal controls, identify control gaps, and recommend appropriate corrective actions.
• Develop and maintain the Compliance Universe, ensuring applicable regulatory obligations, laws, and internal policies are identified and monitored.
• Develop and execute compliance monitoring plans, conduct periodic compliance assessments, and identify regulatory and operational compliance gaps.
• Monitor risk mitigation plans, compliance findings, and corrective actions, ensuring timely follow-up with relevant stakeholders.
• Prepare and review governance documentation, including committee charters, Terms of Reference (ToR), and organizational policies.
• Support governance committees by coordinating activities, documenting decisions, tracking action items, and managing escalations.
• Coordinate with department heads and relevant stakeholders to promote accountability and adherence to governance, risk, and compliance requirements.
• Prepare periodic GRC reports, dashboards, and management presentations highlighting key risks, compliance status, governance activities, and areas for improvement.
• Contribute to the continuous improvement of enterprise-wide GRC practices, internal controls, and organizational effectiveness.

Qualifications & Requirements

• 3–6 years of relevant professional experience in Corporate Governance, Enterprise Risk Management, Regulatory Compliance, or related GRC functions.
• Demonstrated hands-on experience in at least one of the three GRC disciplines, with a sound understanding of the others.
• Strong understanding of enterprise-wide governance frameworks, risk management methodologies, regulatory compliance requirements, and internal controls.
• Practical experience in developing or maintaining risk registers, governance policies, compliance monitoring activities, or control assessment documentation.
• Familiarity with internationally recognized GRC frameworks and standards, such as COSO ERM and ISO 31000, is an advantage.
• Strong analytical, problem-solving, documentation, and reporting skills.
• Ability to collaborate effectively with cross-functional teams, department heads, and senior management.
• Bachelor's or master's degree in Business Administration, Law, Finance, Risk Management, Accounting, or a related discipline, or relevant professional certifications.
• Relevant professional certifications in Governance, Risk Management, Compliance, or Internal Audit are advantageous.
• Previous professional experience in Saudi Arabia is preferred.
• Availability to work full-time on-site in Makkah throughout the 12-month engagement.

Important Note

This position focuses on Enterprise-Wide Governance, Risk Management, and Regulatory Compliance, rather than Cybersecurity GRC or Information Security Compliance.

How to Apply

• Interested candidates are encouraged to apply with an updated CV, indicating their primary GRC specialization, relevant years of experience, expected monthly salary, and earliest available joining date.
• To this email: [اضغط هنا لمشاهدة البريد اﻹلكتروني]