GRC Specialist; IT Risk & IT Compliance

Müller's Solutions is seeking an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. The candidate will be responsible for delivering a structured set of project outputs across governance, risk, compliance, and IT process improvement work streams.

• Develop and deliver the Project Charter & Project Plan
• Conduct current state and maturity assessments and produce formal reports
• Design and implement an IT Governance Framework aligned to SAMA requirements
• Develop a full set of IT policies and procedures
• Define the IT Operating Model and RACI Matrix
• Build and maintain a Control Catalog mapped to SAMA
• Establish Governance Committee Charters and Dashboards
• Conduct Gap Assessments and produce a remediation roadmap
• Perform SAMA Readiness Assessments
• Complete a Risk Assessment for Information Assets
• Develop and maintain Risk Registers and Treatment Plans
• Support IT teams in closing SAMA and Internal Audit observations
• Produce Cybersecurity Compliance Reports and IT Process Performance Reports
• Deliver Knowledge Transfer Sessions to internal stakeholders (up to 10 sessions)

• Minimum 7-10 years in IT GRC, IT Risk, or IT Compliance roles
• Strong working knowledge of SAMA Cybersecurity Framework
• Experience delivering IT governance frameworks and policy suites
• Proven track record in risk assessment and risk register management
• Familiarity with Internal Audit closure processes and compliance reporting
• Experience in maturity assessments aligned to recognised frameworks (NIST, ISO 27001, SAMA)
• Excellent documentation and stakeholder communication skills
• Prior experience in the Saudi Arabian financial or regulated sector is highly preferred

Why Join Us:

• Opportunity to work with a talented and passionate team.
• Competitive salary and benefits package.
• Exciting projects and innovative work environment.