IT Governance, Risk & Compliance (GRC) Officer

IT Governance, Risk & Compliance (GRC) Officer – Strategic Leadership in Financial Services Compliance

Join Linnk Group in Riyadh, Saudi Arabia, as an **IT Governance, Risk & Compliance (GRC) Officer**, where you will play a pivotal role in shaping robust IT governance frameworks, ensuring regulatory adherence, and mitigating risks within the dynamic banking and financial services sector. This position demands a seasoned professional with a proven track record in aligning technology governance with industry standards, regulatory requirements, and organizational objectives.

As the **IT GRC Officer**, you will be responsible for driving compliance initiatives, conducting rigorous risk assessments, and fostering collaboration across IT, risk, operations, and business stakeholders. Your expertise will be instrumental in maintaining operational resilience, safeguarding sensitive data, and ensuring seamless alignment with **SAMA regulations**, **ISO 27001 (Information Security Management)**, and **ISO 22301 (Business Continuity Management)** standards. This role is ideal for a strategic thinker who thrives in a high-stakes, compliance-driven environment and is committed to elevating organizational governance practices.

Key Responsibilities

Your role will encompass a broad spectrum of strategic and operational duties, including:

• Design and Optimize IT Governance Frameworks: Lead the development, implementation, and continuous improvement of **IT Governance Frameworks (ITGF)**, ensuring they align with global best practices and local regulatory requirements.
• Develop and Maintain Compliance Documentation: Author and oversee governance policies, procedures, and compliance documentation to ensure clarity, consistency, and adherence to regulatory standards.
• Conduct Proactive Risk Management: Perform comprehensive **risk assessments**, **gap analyses**, and **control testing** to identify vulnerabilities and implement mitigation strategies. Maintain up-to-date **risk registers**, **Key Risk Indicators (KRIs)**, and **mitigation plans** to proactively address potential threats.
• Ensure Regulatory Alignment: Act as the primary point of contact for **SAMA regulations**, **ISO 27001**, and **ISO 22301** compliance, ensuring all IT operations adhere to these critical standards while meeting banking sector requirements.
• Support Audit Processes: Collaborate with internal and external auditors to facilitate **audit readiness**, track remediation actions, and ensure timely closure of audit findings.
• Assess Third-Party and Vendor Risks: Evaluate the compliance and risk profiles of third-party vendors and external partners, ensuring they meet organizational and regulatory standards.
• Reporting and Stakeholder Engagement: Prepare **GRC reports**, **dashboards**, and **management presentations** to communicate risk exposure, compliance status, and governance effectiveness to senior leadership and stakeholders.
• Foster Cross-Functional Collaboration: Engage with **IT teams, risk management, operations, business stakeholders, and auditors** to align governance strategies with broader organizational goals and operational needs.

Qualifications and Requirements

To excel in this role, you must possess:

• 5+ Years of Specialized Experience: A robust background in **IT Governance, Risk & Compliance (GRC)**, with a minimum of five years of hands-on experience in the **banking and financial services sector**, preferably within Saudi Arabia.
• Expertise in IT Governance Frameworks: Deep knowledge of **IT Governance Framework (ITGF) development, restructuring, and implementation**, with a focus on aligning technology governance with business objectives.
• Regulatory and Compliance Acumen: Extensive familiarity with **SAMA regulations**, **ISO 27001 (Information Security Management)**, and **ISO 22301 (Business Continuity Management)**, along with a strong understanding of banking compliance requirements.
• Risk Management and Audit Experience: Proven experience in managing **risk registers**, conducting **control testing**, and tracking **audit remediation actions** to ensure continuous improvement in governance practices.
• Certifications (Preferred): Holdings such as **CISA, CISM, CRISC, or ISO 27001 Lead Auditor certification** will be highly advantageous.
• Stakeholder and Communication Skills: Exceptional ability to **engage with diverse stakeholders**, articulate complex compliance and risk concepts, and drive alignment across cross-functional teams.
• Language Proficiency: Fluent in **English**; proficiency in **Arabic** is a significant advantage in this regional role.

If you are a strategic compliance professional with a passion for elevating IT governance standards in the financial sector, we invite you to share your profile and explore how your expertise can contribute to Linnk Group’s mission of excellence in risk management and regulatory compliance.