grc specialist

JASARA PMC

JASARA Program Management Company is seeking a highly skilled and experienced Senior GRC (Governance, Risk, Compliance) Specialist to join our team. In this pivotal role, you will be responsible for developing and implementing GRC frameworks that align with our organizational objectives and industry standards. Your expertise will ensure that our projects adhere to regulatory requirements while effectively managing risks associated with governance and compliance.
 You will work closely with various departments to foster a culture of compliance, identifying risks, and ensuring the organization operates with transparency and accountability. Your contributions will be essential to our commitment to delivering exceptional social infrastructure projects in Saudi Arabia.
 
Key Responsibilities: 
<ul>
<li>Develop, implement, and monitor GRC frameworks, policies, and procedures aligned with organizational goals and regulatory requirements.</li>
<li>Conduct thorough risk assessments and audits, identifying vulnerabilities and recommending mitigation strategies.</li>
<li>Ensure compliance with applicable laws, regulations, and industry standards, and serve as a trusted advisor on GRC matters.</li>
<li>Facilitate training and workshops to enhance GRC awareness and promote best practices throughout the organization.</li>
<li>Collaborate with cross-functional teams to integrate GRC considerations into project planning and execution.</li>
<li>Prepare and present GRC reports to senior management and stakeholders, highlighting key findings and recommendations.</li>
<li>Stay informed about emerging trends, risks, and best practices in governance, risk management, and compliance to update and improve organizational frameworks.</li>
<li>Engage with external auditors and regulatory bodies during compliance assessments and reviews.</li>
<li>Support incident investigations and corrective actions for GRC-related issues.</li>
</ul>
Requirements: 
<ul>
<li>Bachelor's degree in business administration, finance, risk management, or a related field.</li>
<li>Minimum of 8 years of experience in governance, risk management, and compliance roles.</li>
<li>Strong knowledge of regulatory requirements and best practices in GRC.</li>
<li>Proven experience in developing and implementing effective GRC programs.</li>
<li>Excellent analytical and problem-solving skills.</li>
<li>Strong communication and interpersonal skills, with the ability to influence stakeholders.</li>
<li>Professional certifications in GRC or risk management (e.g., CCEP, CRISC, CISA) are preferred.</li>
<li>Experience in the construction or infrastructure sectors is an advantage.</li>
<li>Fluency in English is essential; proficiency in Arabic is a plus.</li>
</ul>

Senior GRC Specialist

Innovative Solutions

<div>Innovative Solutions (IS) is a leading pure-player Cyber security company in the GCC established in 2003 headquartered in Riyadh with presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompasses Advisory Services, Technical Assurance, Solution Deployment, Professional Services and Managed Security Services.
Innovative Solutions is committed to its Mission to &ldquo;Bring Trust to Cyberspace&rdquo; to ensure &ldquo;Your Business, Secured!&rdquo;.
Role Description
The Associate GRC Specialist will support the Governance, Risk, and Compliance (GRC) program at Innovative Solutions. You will assist in conducting compliance audits, risk assessments, and ensuring that security policies and procedures are implemented effectively. This role offers an excellent opportunity for professional growth and development in the field of cybersecurity governance.<h3 class="jobSectionHeader">
Responsibilities</h3><ul><li><ul>
<li>Assist in the development, implementation, and maintenance of GRC policies and procedures.</li>
<li>Participate in compliance audits and risk assessments to identify potential gaps.</li>
<li>Support the team in monitoring compliance with applicable regulations and standards.</li>
<li>Document findings and assist in the preparation of reports for management.</li>
<li>Collaborate with teams across the organization to promote a culture of compliance and risk awareness.</li>
<li>Keep abreast of industry best practices, trends, and regulatory changes related to cybersecurity.</li>
<li>Support the organization in training and awareness sessions regarding GRC-related topics.</li>
</ul></li></ul>
Requirements<ul><li><ul>
<li>
Bachelor's degree in Cybersecurity, Information Technology, Business Administration, or a related field.</li>
<li>Familiarity with regulatory requirements and industry standards</li>
<li>0-1 years of experience in governance, risk management, compliance, or a related area.</li>
<li>Basic understanding of cybersecurity frameworks and regulatory requirements.</li>
<li>Strong analytical and problem-solving skills.</li>
<li>Excellent written and verbal communication skills.</li>
<li>Ability to work collaboratively within a team environment.</li>
<li>Willingness to learn and grow in the field of Governance, Risk, and Compliance.</li>
</ul></li></ul>
Benefits<ul>
<li>
Comprehensive training and development programs.</li>
<li>Opportunity for career growth and advancement.</li>
<li>Friendly and supportive work environment.</li></ul></div>

Associate GRC Specialist

Sahl

<div>job Overview
At Sahl, we build products people rely on daily for essential financial tasks. Our foundation is trust, and that trust depends on strong, well-designed governance. We&rsquo;re looking for a GRC Specialist/Manager who can build practical frameworks, streamline compliance, and empower teams to move faster with confidence. This role is all about enabling the business, not slowing it down. 
Responsibilities<ul><li>
Develop, update, and maintain internal policies, security standards, and governance frameworks, ensuring they are practical, lightweight, and aligned with engineering, product, and operational workflows.</li><li>
Own and manage the compliance roadmap (ISO 27001, PCI-DSS, GDPR, and local regulations) and coordinate with cross-functional teams to prepare for internal and external audits, ensuring smooth execution.</li><li>
Conduct end-to-end risk assessments across technology, product, business operations, and vendor relationships, assigning clear risk owners, defining mitigation strategies, and tracking progress.</li><li>
Oversee incident response processes and ensure proper governance around security events, supporting teams in improving process maturity without adding unnecessary operational friction.</li><li>
Drive security and compliance awareness across the company, transforming requirements into intuitive practices and adoptable habits rather than rigid checklists.</li><li>
Qualifications:</li></ul><ul><li>
Experience in GRC, preferably within fintech, financial services, or other highly regulated industries.</li><li>
Strong understanding of security frameworks, compliance standards, and risk management methodologies.</li><li>
Ability to translate complex compliance requirements into simple, actionable guidance.</li><li>
Excellent communication and stakeholder-management skills across technical and non-technical teams.</li><li>
Calm, structured mentality when navigating ambiguity, pressure, or urgent issues.</li><li>
An enablement-first mindset focused on helping teams move faster with predictable controls.</li></ul></div>

GRC Specialist / Manager

NTT DATA

<div>Make an impact with NTT DATA 
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion &ndash; it&rsquo;s a place where you can grow, belong and thrive.<div>
Your day at NTT DATA 
The Information Security Governance, Risk and Compliance (GRC) Specialist is a seasoned subject matter expert, responsible for supporting the organization's information security program by assessing risks, implementing security controls, ensuring compliance, managing security awareness initiatives, and contributing to policy development. 
 
This role collaborates with internal teams to enhance security practices and maintain a strong security posture.</div><div> 
Key responsibilities:<ul><li>
Assists in conducting risk assessments and vulnerability assessments.</li><li>
Contributes to the development and maintenance of security policies and procedures.</li><li>
Collaborates with internal stakeholders to ensure compliance with industry standards and regulations.</li><li>
Participates in security awareness and training initiatives.</li><li>
Supports incident response activities and investigations as required.</li><li>
Monitors and reports on security compliance metrics.</li><li>
Assists in the implementation of security controls and best practices.</li><li>
Stays updated with emerging security threats and trends.</li><li>
Performs any other related task as required.</li></ul></div><div> 
To thrive in this role, you need to have:<ul><li>
Seasoned familiarity with information security frameworks and standards.</li><li>
Seasoned understanding of risk assessment methodologies, compliance, and policy development.</li><li>
Strong communication and interpersonal skills for effective collaboration.</li><li>
Strong attention to detail and ability to follow established processes.</li><li>
Seasoned project management skills for coordinating security initiatives.</li></ul></div><div> 
Academic qualifications and certifications:<ul><li>
Bachelor&rsquo;s degree or equivalent in Information Technology or Computer Science degree or related field.</li><li>
Security certifications such as CISA, CRISC, COBIT, IIA or equivalent preferred.</li><li>
Certifications such as Lead audit/Implementer - ISO 27001, SOC TSP desirable.</li></ul></div><div> 
Required experience:<ul><li>
Seasoned experience in information security or related roles.</li><li>
Seasoned exposure to risk assessment, compliance, security awareness, or policy development is beneficial.</li></ul></div>
Workplace type:
On-site Working
About NTT DATA 
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world&rsquo;s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&amp;D.
Equal Opportunity Employer 
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.
Third parties fraudulently posing as NTT DATA recruiters
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters&mdash;whether in writing or by phone&mdash;in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.</div>

Senior Information Security GRC Specialist

Prodapt Solutions

<div>Overview:

Join our team to deliver powerful insights to help our clients navigate the ever-changing threat design and technology as we partner with clients to transform finance. 
Skills Required: ServiceNow + GRC + IRM 
Work you&rsquo;ll do:<ul><li>
Highly proficient in configuring and developing on the ServiceNow platform, with a comprehensive understanding of core platform features, functionalities, secure application operations, and exception handling during ongoing operations.</li><li>
Facilitate the adoption of technology-based tools and methodologies to continuously enhance the monitoring, management, and reliability of services.</li><li>
Define architecture and design elements for the implementation of ServiceNow solutions, including the design of data/object models, technical workflow diagrams, and access control models.</li><li>
Analyze business requirements, define and document epics and user stories, create UI mock-ups, and adopt a hands-on approach to drive project success.</li><li>
Deliver ServiceNow training and provide support to teams on complex system configurations.</li><li>
Responsible for end-to-end use case design, workflow configurations, customizations, and deployments to higher environments.</li><li>
Demonstrate sound judgment and a pragmatic approach to delivering solutions that optimize architectural activities in alignment with organizational needs, business constraints, and technological realities.</li><li>
Possess the skills and knowledge necessary to support sales activities within the domain of expertise.</li></ul>
Responsibilities:

Cyber Strategy &amp; Transformation teams develop and transform cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. They keep the enterprise a step ahead of the evolving threat landscape and give stakeholders confidence in the organization's cyber posture. Services include the design of cyber organization, governance, and risk assessments. Services also encompass Cybersecurity Assessments and Frameworks, Cyber Transformation Management, Technology Software and Asset Compliance Management, Third Party Risk Management, Cyber Risk and Compliance, Solution Design and Implementation, and Cyber Risk Analytics and Quantification Reporting. 
Must Have Skills/Project Experience/Certifications:<ul><li>
7+ years of overall and relevant ServiceNow experience in implementing applications such as IRM (Integrated Risk Management), SIR, VR, TPRM, BCM.</li><li>
Demonstrated experience with technical aspects of ServiceNow, including workflow design, APIs, web services, and integrations using connectors (preferred).</li><li>
Hands-on experience configuring Workspace, UI Builder, Business Rules, Client Scripts, UI Policies, UI Scripts, UI Actions, UI Pages, Script Includes, Access Control Lists, complex workflows/Flow Designer, and migrating solutions to higher environments.</li><li>
Well-versed in various ServiceNow products and platform capabilities.</li><li>
Proficient in defining epics and user stories, creating UI mock-ups, and adopting a hands-on approach to drive results.</li><li>
Ability to conduct regular code reviews, adopt ServiceNow best practices for software design and development across the platform ecosystem, and provide technical guidance to colleagues and customers to resolve questions and issues.</li><li>
Experience designing, configuring, and developing product automations and integrations.</li><li>
Skilled in the design and development of scoped applications of varying complexity.</li><li>
Proficient in ServiceNow platform management such as deployments, upgrades and troubleshooting.</li><li>
Collaborate with Functional Consultants and Business Analysts to create and estimate user stories, and propose solutions that meet or exceed customer expectations for quality and user experience.</li><li>
Experience in developing and maintaining ServiceNow product knowledge and/or certifications.</li><li>
Ability to prioritize personal and team workloads and consistently meet deadlines.</li><li>
Excellent documentation, presentation, verbal, and written communication skills, with the ability to work effectively with teams across geographical locations.</li><li>
Must have delivered more than 2&ndash;3 projects end-to-end, from requirement gathering through to go-live.</li><li>
Optional: ServiceNow Certified System Administrator.</li></ul>
Requirements:

Good to Have Skills:<ul><li>
Must have ServiceNow IRM or Security Operations module implementation experience (like Risk Management, Audit Management, Policy Management, Vendor Risk Management &amp; SIR Modules, etc.)</li><li>
Good to have ITAM, SAM, HAM &amp; CMDB experience.</li><li>
Good to have ServiceNow Certified Application Developer (CAD).</li><li>
Good to have CIS - Risk and Compliance Implementation specialist certification.</li><li>
Good to have CIS &ndash; Security Incident Response Implementation specialist certification.</li><li>
Good to have CIS &ndash; Third Party Risk Management Implementation specialist certification.</li><li>
Good to have CIS &ndash; Vulnerability Response Implementation specialist certification.</li><li>
Good to have knowledge of strategic roadmap development for GRC technologies ServiceNow and other like RSA Archer, MetricStream.</li></ul></div>

ServiceNow Technical Lead

DXC Technology

<div>
 
 Job Description
 
 
 
 At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We&rsquo;re committed to fostering an inclusive environment where everyone can thrive.
 
 
 The SAP GRC Consultant is responsible for designing, implementing, and supporting SAP Governance, Risk, and Compliance (GRC) solutions to strengthen internal controls, risk management, user access governance, and compliance reporting. The consultant will work closely with security, audit, and business stakeholders to ensure regulatory adherence (SOX, IFRS, ISO, local compliance) and alignment with enterprise risk management frameworks.
 
 
 
 Key Process &amp; Technical Knowledge
 
 
 
 
 The Consultant Should Have Strong Expertise In
 
 
 
 
 SAP GRC Access Control (AC):
 
 
 
 <ul>
 <li>
 User Access Management (UAR).
 </li>
 <li>
 Emergency Access Management (EAM / Firefighter).
 </li>
 <li>
 Access Risk Analysis (ARA).
 </li>
 <li>
 Business Role Management (BRM).
 
 
 </li>
 </ul>
 
 SAP GRC Process Control (PC)
 
 
 
 <ul>
 <li>
 Control design, documentation, monitoring, and testing.
 </li>
 <li>
 Continuous Control Monitoring (CCM).
 </li>
 <li>
 Policy management &amp; workflow.
 
 
 </li>
 </ul>
 
 SAP GRC Risk Management (RM)
 
 
 
 <ul>
 <li>
 Enterprise Risk Management framework configuration.
 </li>
 <li>
 Risk assessment methodologies.
 </li>
 <li>
 Key Risk Indicators (KRIs).
 
 
 </li>
 </ul>
 
 SAP Audit Management (AM)
 
 
 
 <ul>
 <li>
 Planning and execution of audit engagements.
 </li>
 <li>
 Integration with risk and process control.
 </li>
 <li>
 Audit reporting and follow-up tracking.
 
 
 </li>
 </ul>
 
 Integration Skills
 
 
 
 <ul>
 <li>
 SAP GRC with SAP S/4HANA security concepts.
 </li>
 <li>
 Interfaces with Identity Management (IDM) and LDAP/AD.
 </li>
 <li>
 Understanding of SoD (Segregation of Duties) frameworks.
 
 
 </li>
 </ul>
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Conduct requirement gathering workshops with Audit, Risk, Compliance, and IT Security teams.
 </li>
 <li>
 Configure and support GRC Access Control, Process Control, Risk Management, and Audit Management modules.
 </li>
 <li>
 Perform SoD analysis, remediation, and mitigating control design.
 </li>
 <li>
 Implement workflow automation for user provisioning and access approvals.
 </li>
 <li>
 Support business role design and access governance.
 </li>
 <li>
 Enable continuous monitoring of controls and risks in SAP and non-SAP environments.
 </li>
 <li>
 Provide expertise during internal and external audits.
 </li>
 <li>
 Deliver end-user and key-user training on SAP GRC functionalities.
 </li>
 <li>
 Work closely with Basis and Security teams to ensure compliance with corporate IT policies.
 </li>
 <li>
 Support cutover, hypercare, and ongoing compliance operations.
 
 
 </li>
 </ul>
 
 Required Qualifications &amp; Skills
 
 
 
 
 Education &amp; Certifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Systems, Computer Science, Finance, or related field.
 </li>
 <li>
 SAP GRC Certification (preferred).
 </li>
 <li>
 CISA, CISM, CRISC, or similar audit/security certifications (advantage).
 
 
 </li>
 </ul>
 
 Experience
 
 
 
 <ul>
 <li>
 5&ndash;8 years in SAP Security &amp; Compliance, with minimum 3 years in SAP GRC.
 </li>
 <li>
 Hands-on implementation/support in Access Control + at least one of PC/RM/AM.
 </li>
 <li>
 Experience with SoD rule set customization and remediation.
 </li>
 <li>
 Exposure to compliance frameworks like SOX, GDPR, ISO 27001, NCA/NCA ECC.
 
 
 </li>
 </ul>
 
 Technical Skills
 
 
 
 <ul>
 <li>
 Strong knowledge of SAP authorization concepts (roles, profiles, SUIM, SU24, PFCG).
 </li>
 <li>
 Expertise in GRC workflow, BRF+, MSMP configuration.
 </li>
 <li>
 Understanding of connector setup between GRC and SAP systems.
 </li>
 <li>
 Familiarity with audit and risk management best practices.
 
 
 </li>
 </ul>
 
 Soft Skills
 
 
 
 <ul>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication for engaging business, audit, and IT teams.
 </li>
 <li>
 Ability to work under compliance pressure and deadlines.
 
 
 </li>
 </ul>
 At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We&rsquo;re committed to fostering an inclusive environment where everyone can thrive.
 
 
 
 Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available
 
 here
 
 
 .
 
 
</div>

SAP GRC / Audit / Risk Management

Saudi Air Navigation Services

<div>
 
 QUALIFICATIONS / REQUIREMENTS
 
 
 Knowledge and Experience
 
 
 ● Minimum of 9 years of experience in Compliance &amp; Governance / Board secretarial services or equivalent is required.
 
 
 ● Relevant experience in similar industry is preferred. Education and Certifications
 
 
 ● A bachelor&rsquo;s degree in legal, business administration, engineering or equivalent is required.
 
 
 ● Professional certification in Governance, GRC, Compliance and / or Internal Audit is preferred.
 
 
 
 
 
 Key Accountability Areas
 
 
 Key Activities
 
 
 Planning and Strategy
 
 
 ● Contribute to the design and implementation of the department&rsquo;s strategy and roadmap by providing function specific inputs
 
 
 ● Establish and implement the function&rsquo;s operational plans in support of the department&rsquo;s overall strategic plan and KPIs
 
 
 ● Provide inputs in GRC directorate&rsquo;s strategic and business planning process in relation to governance and compliance
 
 
 ● Lead and monitor development of governance and compliance plans and budgets, strategic objectives and KPIs, in accordance with SANS overall strategies and directions.
 
 
 ● Prepare, submit and justify governance and compliance budget amendments requested from the GRC director.
 
 
 Budget
 
 
 ● Participate in department annual budgeting cycle and process
 
 
 ● Contribute to utilizing department budget effectively, and report accurately on progress made and challenges encountered
 
 
 ● Investigate and propose implementing strategies that result in positive financial impact for SANS and mitigate financial and operational risks
 
 
 Compliance &amp; Governance
 
 
 ● Maintain custody of SANS corporate governance and compliance framework, manual and delegation of authority matrices and ensure these are updated as per the directives of the Board and based on changes in the organization.
 
 
 ● Ensure governance at SANS is in compliance with SANS corporate governance framework and related documentation such as delegation of authority matrices, articles of association, bylaws, Board and committee charters and resolutions.
 
 
 ● Gather information related to new laws and regulations applicable to SANS pertaining to different areas, departments, and processes.
 
 
 ● Supervise and manage the development of centralized repository of compliance obligations (laws, regulations, contractual and internal requirements).
 
 
 ● Ensure all disclosure and transparency requirements are performed as per the corporate governance requirements. In doing so, ensuring adequate level of collaboration / engagement takes place with concerned organizational stakeholders.
 
 
 ● Support the management with implementation of actions originating from the Board and Committee meetings, resolutions, as necessary.
 
 
 ● Conduct Governance and Compliance awareness and training sessions for employees.
 
 
 ● Plan and provide regular alerts / emails and trainings on compliance risks and obligations.
 
 
 ● Identify and recommend necessary trainings on corporate governance for the Board and leadership team.
 
 
 ● Prepare annual report on corporate governance and compliance, and recommendations on improvements.
 
 
 ● Provide recommendations on enhancements / updates to the corporate governance manual and practices, in line with good corporate governance practices, and changes in laws and regulations. Policies, Processes and Procedures
 
 
 ● Propose improvements to the department&rsquo;s policies, and ensure the implementation of procedures and controls across all areas of activity so that all relevant procedural/legislative requirements are fulfilled while delivering high quality and cost-effective results
 
 
 ● Monitor day-to-day activities to ensure compliance with stipulated policies and procedures
 
 
 ● Stimulate subordinates and contribute to the identification of opportunities for continuous improvement of systems and processes taking into account leading practices, changes in business environment, cost reduction and productivity improvement
 
 
 People Management
 
 
 ● Manage, guide and assist direct reports to perform their functional operations in accordance with set policies and procedures
 
 
 ● Participate in identifying and recruiting key talent for the department
 
 
 ● Promote a high-performance working environment embracing SANS&rsquo;s values
 
</div>

Compliance & Governance Manager

Search 4263+ Grc specialist jobs near you this January. New roles added regularly across leading industries. Apply today.