Senior IT Governance Specialist

Job description / Role

Department: IT Operations

Employment type: Full time
Location: KSA

Description

The IT GRC Specialist will implement and manage the SAMA IT Governance Framework to ensure full compliance with regulatory requirements. This role is critical in supporting IT governance, risk, and compliance initiatives by conducting IT risk assessments, developing policies and procedures, and establishing measurable KPIs and SLAs.

Key responsibilities

• Draft, review, and update IT policies, procedures, and governance documentation in line with SAMA requirements.
• Develop, track, and report on IT governance metrics, KPIs, and SLAs (e.g., user access reviews).
• Host and coordinate IT Steering Committee (ITSC) meetings, ensuring timely follow-up on actions and decisions.
• Conduct IT risk assessments and support risk treatment planning.
• Act as the primary liaison with SAMA during audits, examinations, and regulatory communications.
• Collaborate closely with cybersecurity and risk teams to ensure risks are identified, assessed, and managed effectively.
• Monitor compliance with IT governance standards and regulatory frameworks.

Skills, knowledge & expertise

• Proven experience implementing and managing the SAMA IT Governance Framework (hands-on, practical application required).
• 3-5 years of relevant experience in IT Governance, Risk, and Compliance, preferably in banking, insurance, or fintech.
• Bachelor's degree in Management of Information Systems, Computer Information Systems (CIS), or related field.
• Strong knowledge of IT risk management principles and regulatory compliance.
• Bilingual proficiency in Arabic and English (spoken and written).
• Excellent stakeholder management skills with the ability to work cross-functionally.