Tawantech
Governance, Risk & Compliance (GRC) Manager
- Permanent
- Riyadh, Saudi Arabia
- Experience 10 - 15 yrs
Job expiry date: 03/05/2026
Job overview
Date posted
19/03/2026
Location
Riyadh, Saudi Arabia
Salary
SAR 30,000 - 40,000 per month
Compensation
Comprehensive package
Experience
10 - 15 yrs
Seniority
Manager
Qualification
Bachelors degree
Expiration date
03/05/2026
Job description
The Governance, Risk & Compliance (GRC) Manager role in Riyadh, Saudi Arabia is responsible for leading IT governance, risk management, and compliance initiatives within a banking or financial services environment, ensuring alignment with the SAMA IT Governance Framework (ITGF) and international standards such as COBIT, COBIT2019, ITIL, ISO 27001, ISO 20000, NIST, and PCI DSS. The role requires extensive experience in IT governance frameworks, regulatory compliance, and enterprise risk management, with a strong focus on implementing and managing IT Governance & Compliance frameworks across the organization. The position involves conducting IT audits, risk assessments, and compliance reviews to ensure effective controls, mitigate risks, and maintain regulatory adherence. The GRC Manager will drive enterprise-wide risk management strategies, oversee the development of policies, procedures, and process improvements, and collaborate with internal stakeholders and external regulators such as SAMA to ensure audit readiness and compliance. The role includes leading business continuity planning (BCP) and disaster recovery planning (DRP) for IT operations, as well as providing strategic advisory on IT contracts, budgets, licensing compliance, and vendor management. The candidate is expected to guide and coach teams on IT governance, security, and compliance best practices, leveraging certifications such as CISA, CISM, CISSP, CGEIT, GRCP/GRCA, COBIT2019, and ITIL. The role requires deep expertise in regulatory frameworks, risk mitigation strategies, and governance structures within the Saudi Arabia or GCC financial ecosystem.
Required skills
Key responsibilities
- Develop, implement, and manage the IT Governance & Compliance framework across the organization in alignment with SAMA IT Governance Framework and international standards
- Ensure compliance with SAMA IT Governance Framework (ITGF), COBIT, ISO 27001, ISO 20000, ITIL, NIST, and PCI DSS requirements
- Lead IT audits, risk assessments, and compliance reviews to evaluate controls, identify risks, and ensure regulatory adherence
- Drive enterprise-wide risk management strategies and regulatory compliance initiatives across IT and business functions
- Oversee development and enhancement of policies, procedures, and processes to strengthen governance and operational excellence
- Collaborate with internal stakeholders and external regulators such as SAMA to ensure audit readiness and continuous compliance
- Lead business continuity planning (BCP) and disaster recovery planning (DRP) for IT operations to ensure resilience and risk mitigation
- Provide strategic advisory on IT contracts, budgets, licensing compliance, and vendor management practices
- Coach and guide teams on IT governance, security, and compliance best practices and frameworks
Experience & skills
- Possess a Bachelor’s or Master’s degree in IT, Finance, or a related field, with MBA or Engineering qualifications preferred to support advanced governance and risk management responsibilities.
- Demonstrate 10+ years of experience in IT Governance, Risk, and Compliance, including at least 5 years within banking or financial services environments, ensuring familiarity with sector-specific regulatory frameworks.
- Exhibit hands-on experience in implementing and managing SAMA IT Governance Framework (ITGF) or equivalent regulatory frameworks within regulated financial institutions.
- Demonstrate strong knowledge of governance and compliance frameworks including COBIT, COBIT2019, ITIL, ISO 27001, ISO 20000, NIST, and PCI DSS, ensuring ability to align organizational practices with global standards.
- Possess proven experience in conducting IT audits, performing risk assessments, executing compliance reviews, and implementing effective risk mitigation strategies.
- Hold or demonstrate knowledge of professional certifications such as CISA, CISM, CISSP, CGEIT, GRCP/GRCA, COBIT2019, and ITIL to validate expertise in governance, risk, and compliance disciplines.
- Demonstrate experience in business continuity planning (BCP) and disaster recovery planning (DRP), ensuring operational resilience and continuity of IT services.
- Exhibit strong capability in vendor management, IT contract advisory, budgeting, and licensing compliance to support governance and financial oversight functions.
- Show familiarity with regulatory environments in Saudi Arabia or GCC region, including interaction with regulators such as SAMA and maintaining audit readiness.