Müller's Solutions is seeking an experienced GRC Specialist to support a SAMA-aligned IT Risk and IT Compliance Assessment programme. The candidate will be responsible for delivering a structured set of project outputs across governance, risk, compliance, and IT process improvement workstreams.
Key Responsibilities:
-
Develop and deliver the Project Charter & Project Plan
-
Conduct current state and maturity assessments and produce formal reports
-
Design and implement an IT Governance Framework aligned to SAMA requirements
-
Develop a full set of IT policies and procedures
-
Define the IT Operating Model and RACI Matrix
-
Build and maintain a Control Catalog mapped to SAMA
-
Establish Governance Committee Charters and Dashboards
-
Conduct Gap Assessments and produce a remediation roadmap
-
Perform SAMA Readiness Assessments
-
Complete a Risk Assessment for Information Assets
-
Develop and maintain Risk Registers and Treatment Plans
-
Support IT teams in closing SAMA and Internal Audit observations
-
Produce Cybersecurity Compliance Reports and IT Process Performance Reports
-
Deliver Knowledge Transfer Sessions to internal stakeholders (up to 10 sessions)
Requirements
Requirements:
-
Minimum 7–10 years in IT GRC, IT Risk, or IT Compliance roles
-
Strong working knowledge of SAMA Cybersecurity Framework
-
Experience delivering IT governance frameworks and policy suites
-
Proven track record in risk assessment and risk register management
-
Familiarity with Internal Audit closure processes and compliance reporting
-
Experience in maturity assessments aligned to recognised frameworks (NIST, ISO 27001, SAMA)
-
Excellent documentation and stakeholder communication skills
-
Prior experience in the Saudi Arabian financial or regulated sector is highly preferred
Benefits
Why Join Us:
Opportunity to work with a talented and passionate team.
Competitive salary and benefits package.
Exciting projects and innovative work environment.