About the role
Müller's Solutions is seeking an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. The candidate will be responsible for delivering a structured set of project outputs across governance, risk, compliance, and IT process improvement workstreams.
Key Responsibilities:
- Develop and deliver the Project Charter & Project Plan - Conduct current state and maturity assessments and produce formal reports - Design and implement an IT Governance Framework aligned to SAMA requirements - Develop a full set of IT policies and procedures - Define the IT Operating Model and RACI Matrix - Build and maintain a Control Catalog mapped to SAMA - Establish Governance Committee Charters and Dashboards - Conduct Gap Assessments and produce a remediation roadmap - Perform SAMA Readiness Assessments - Complete a Risk Assessment for Information Assets - Develop and maintain Risk Registers and Treatment Plans - Support IT teams in closing SAMA and Internal Audit observations - Produce Cybersecurity Compliance Reports and IT Process Performance Reports - Deliver Knowledge Transfer Sessions to internal stakeholders (up to 10 sessions)
Requirements
Requirements:
- Minimum 7–10 years in IT GRC, IT Risk, or IT Compliance roles - Strong working knowledge of SAMA Cybersecurity Framework - Experience delivering IT governance frameworks and policy suites - Proven track record in risk assessment and risk register management - Familiarity with Internal Audit closure processes and compliance reporting - Experience in maturity assessments aligned to recognised frameworks (NIST, ISO 27001, SAMA) - Excellent documentation and stakeholder communication skills - Prior experience in the Saudi Arabian financial or regulated sector is highly preferred
Benefits
Why Join Us:
Opportunity to work with a talented and passionate team.
Competitive salary and benefits package.
Exciting projects and innovative work environment.
Text as published by Müller`s Solutions. We don't edit postings; apply and ask questions on the employer's site.