GRC Specialist (IT Risk & IT Compliance) - Immediate Joining
Müller's Solutions is seeking an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. The candidate will be responsible for delivering a structured set of project outputs across governance, risk, compliance, and IT process improvement workstreams.
Key Responsibilities:
- Develop and deliver the Project Charter & Project Plan
- Conduct current state and maturity assessments and produce formal reports
- Design and implement an IT Governance Framework aligned to SAMA requirements
- Develop a full set of IT policies and procedures
- Define the IT Operating Model and RACI Matrix
- Build and maintain a Control Catalog mapped to SAMA
- Establish Governance Committee Charters and Dashboards
- Conduct Gap Assessments and produce a remediation roadmap
- Perform SAMA Readiness Assessments
- Complete a Risk Assessment for Information Assets
- Develop and maintain Risk Registers and Treatment Plans
- Support IT teams in closing SAMA and Internal Audit observations
- Produce Cybersecurity Compliance Reports and IT Process Performance Reports
- Deliver Knowledge Transfer Sessions to internal stakeholders (up to 10 sessions)
Requirements
Requirements:
- Minimum 7–10 years in IT GRC, IT Risk, or IT Compliance roles
- Strong working knowledge of SAMA Cybersecurity Framework
- Experience delivering IT governance frameworks and policy suites
- Proven track record in risk assessment and risk register management
- Familiarity with Internal Audit closure processes and compliance reporting
- Experience in maturity assessments aligned to recognised frameworks (NIST, ISO 27001, SAMA)
- Excellent documentation and stakeholder communication skills
- Prior experience in the Saudi Arabian financial or regulated sector is highly preferred
Benefits
Why Join Us:
Opportunity to work with a talented and passionate team.
Competitive salary and benefits package.
Exciting projects and innovative work environment.
As published by workable
First name, Last name, Email, Headline, Phone, Address, Photo, Education, Experience, Summary, Resume, Cover letter
- What is your current salary in SAR ? written answer
- What is your expected salary in SAR ? written answer
- What is your notice period or availability to join? written answer
- Are you ready for immediate joining in Riyadh, Saudi Arabia? yes / no
- Where are you located now? written answer
- Which languages do you speak? written answer
- Have you previously developed IT Governance Frameworks, IT policies & procedures, and Risk Registers as formal project deliverables? yes / no
- Do you have experience supporting IT teams in closing Internal Audit or regulatory observations within a financial or government-regulated organisation? written answer
- Do you have hands-on experience working with the SAMA Cybersecurity Framework, including conducting readiness assessments and mapping controls? yes / no