GRC Senior Specialist

SOLGulf is a digital transformation consulting partner that helps organizations accelerate AI and cloud enablement while building trusted data foundations. Through its delivery centers in the UAE, KSA, and Pakistan, SOLGulf provides technology consulting and digital transformation services across multiple industries.

The GRC Senior Specialist is responsible for developing and implementing an integrated IT Governance, Risk, and Compliance (GRC) framework, managing IT policies and procedures, and ensuring full compliance with internal policies and applicable regulations.

The role also serves as the primary liaison between the Information Technology Department and other corporate departments, Enterprise Risk Management, Compliance, and Internal Audit to ensure effective coordination and timely resolution of governance and compliance gaps.

• Develop, review, and continuously improve all IT policies and procedures to address existing gaps.
• Review and update the RACI Matrix to ensure clear roles and responsibilities across IT operations and projects.
• Implement recognized governance frameworks such as COBIT 2019 and ITIL in alignment with organizational objectives.

• Ensure IT compliance with internal policies and applicable national regulations, including NCA and SDAIA requirements.
• Act as the primary point of contact for internal and external auditors.
• Prepare responses to audit observations and follow up on corrective actions until closure.
• Conduct periodic self-assessments to identify and address operational and control gaps.
• Identify, assess, monitor, and manage IT-related risks.
• Develop mitigation and response plans for identified risks.
• Establish, maintain, and regularly update the IT Risk Register.
• Serve as the official liaison between the IT Department and other corporate functions, including Enterprise Risk Management, Compliance, and Internal Audit.
• Translate business and operational requirements into IT governance controls, policies, and procedures, and vice versa.

Bachelor's degree in Computer Science, Information Technology, Management Information Systems (MIS), or a related field.

• Minimum 5–7 years of experience in IT Governance, Risk, and Compliance (GRC).
• Strong understanding of Governance and Risk Management frameworks, including COBIT
  , ISO 31000
  , and ISO 27001
  .
• Excellent policy and procedure writing and documentation skills.
• Strong communication and stakeholder management skills with the ability to act as a liaison across different business functions.
• Strong analytical and problem-solving skills with the ability to identify control gaps and design practical solutions.