compliance manager

qa/qc manager

compliance officer

governance & compliance senior specialist Jobs in Riyadh

governance & compliance senior specialist

head of operation risk management Jobs in Riyadh

head of operation risk management

risk and compliance manager

Safqah Capital | صفقة المالية

<div>
 
 
 Role Overview:
 
 
 
 As a Compliance Manager at Safqah Capital, you will play a critical role in ensuring that all our operations, financial products, and real estate financing models comply with local regulations, Shariah guidelines, and international best practices. You will work closely with internal teams and external stakeholders to create a secure, transparent, and legally sound foundation for our innovative proptech and fintech ecosystem.
 
 
 
 
 
 
 Key Responsibilities:
 
 
 <ul>
 <li>
 Monitor, review, and interpret relevant regulatory frameworks, including CMA, SAMA, and Shariah compliance requirements, ensuring Safqah remains fully aligned.
 </li>
 <li>
 Develop and implement internal compliance policies, procedures, and controls.
 </li>
 <li>
 Support licensing processes and ongoing reporting obligations with regulatory bodies.
 </li>
 <li>
 Collaborate with legal, finance, operations, and product teams to proactively identify and mitigate compliance risks.
 </li>
 <li>
 Conduct periodic internal audits, risk assessments, and due diligence on partners and vendors.
 </li>
 <li>
 Maintain up-to-date documentation on compliance processes and assist with training staff on regulatory updates and best practices.
 </li>
 <li>
 Act as a liaison between Safqah and regulatory authorities during reviews or inquiries.
 </li>
 </ul>
 
 
 
 
 
 Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Law, Finance, Business Administration, or a related field.
 </li>
 <li>
 Advanced degrees or certifications in compliance, finance, or law are a plus.
 </li>
 <li>
 CME 1 and CME 2 certifications are highly desirable.
 </li>
 </ul>
 
 
 
 
 
 Experience:
 
 
 <ul>
 <li>
 5&ndash;7 years of experience in compliance roles within financial institutions, fintech, investment firms, or regulatory bodies.
 </li>
 <li>
 Strong understanding of Saudi financial regulations (CMA, SAMA) and experience in a Shariah-compliant environment is highly preferred.
 </li>
 <li>
 Familiarity with real estate finance and investment products is a strong advantage.
 </li>
 </ul>
 
 
 
 
 
 Technical Experience:
 
 
 <ul>
 <li>
 Proficiency in compliance tools, risk management platforms, and documentation systems.
 </li>
 <li>
 Strong analytical and reporting skills, with attention to detail.
 </li>
 <li>
 Ability to interpret legal/regulatory texts and translate them into clear operational guidelines.
 </li>
 </ul>
 
 
</div>

Compliance Manager

SAUDIBIO - سعودي بايو

<div>
 
 
 About SaudiBio:
 
 
 
 Saudi Biotechnology Manufacturing Company (SAUDIBIO) is a Saudi Joint Stock Company and was established in 2010. A leading biopharmaceutical company duly incorporated in the Kingdom of Saudi Arabia, SaudiBio has a multipurpose sterile fill and finish facility for biopharmaceutical products and is a leading insulin manufacturer in Saudi Arabia.
 
 
 
 
 
 
 About the Job Location:
 
 
 
 Riyadh - Saudi Arabia
 
 
 
 Working Days and Hours:
 
 
 
 Sunday to Thursday, from 8:00 AM to 5:00 PM
 
 
 
 Position title:
 
 
 
 Risk and Compliance Manager
 
 
 
 
 
 
 Main Responsibilities:
 
 
 
 
 
 
 
 1. Risk Management
 
 
 <ul>
 <li>
 Develop, implement, and maintain a comprehensive enterprise risk management framework.
 </li>
 <li>
 Identify, assess, and mitigate operational, financial, regulatory, and strategic risks.
 </li>
 <li>
 Collaborate with business leaders to define risk appetite and develop mitigation strategies.
 </li>
 <li>
 Monitor emerging risks and provide proactive recommendations to management.
 </li>
 </ul>
 
 
 
 
 
 2. Compliance Oversight
 
 
 <ul>
 <li>
 Ensure organizational compliance with all relevant laws, regulations, and industry standards in Saudi Arabia.
 </li>
 <li>
 Monitor regulatory changes and update internal policies and procedures accordingly.
 </li>
 <li>
 Act as the primary liaison with regulators, external auditors, and other stakeholders.
 </li>
 </ul>
 
 
 
 
 
 3. Policy Development &amp; Governance
 
 
 <ul>
 <li>
 Develop and maintain policies and procedures in collaboration with legal, business, and operational teams.
 </li>
 <li>
 Ensure policies are effectively communicated and consistently implemented across the organization.
 </li>
 <li>
 Support governance initiatives to promote transparency, accountability, and ethical decision-making.
 </li>
 </ul>
 
 
 
 
 
 4. Internal Controls &amp; Assurance
 
 
 <ul>
 <li>
 Establish and maintain robust internal controls to safeguard company assets and ensure operational integrity.
 </li>
 <li>
 Conduct regular assessments of control effectiveness and recommend improvements.
 </li>
 <li>
 Oversee audits and ensure timely resolution of findings.
 </li>
 </ul>
 
 
 
 
 
 5. Reporting &amp; Communication
 
 
 <ul>
 <li>
 Prepare and deliver regular risk and compliance reports to executive management and the board.
 </li>
 <li>
 Provide actionable insights and recommendations to enhance organizational resilience.
 </li>
 </ul>
 
 
 
 
 
 6. Training &amp; Awareness
 
 
 <ul>
 <li>
 Develop and deliver training programs on risk management, compliance, and ethical conduct.
 </li>
 <li>
 Promote a culture of compliance awareness and accountability across the organization.
 </li>
 </ul>
 
 
 
 
 
 7. Incident Management
 
 
 <ul>
 <li>
 Develop and implement incident response plans to address compliance breaches or risk events.
 </li>
 <li>
 Lead investigations, recommend corrective actions, and monitor resolution.
 </li>
 </ul>
 
 
 
 
 
 Qualifications &amp; Experience
 
 
 
 
 
 
 
 Education
 
 
 <ul>
 <li>
 University degree in business management, legal studies, business administration, project management, or a related field.
 </li>
 <li>
 Professional certifications (e.g., GRC, Audit, or CPA) are highly desirable.
 </li>
 </ul>
 
 
 Experience
 
 
 <ul>
 <li>
 Minimum 7 years of experience in senior compliance, governance, or risk management roles.
 </li>
 <li>
 Experience in highly regulated industries (e.g., pharmaceuticals, healthcare, or finance) is preferred.
 </li>
 </ul>
 
 
 
 
 
 Skills &amp; Competencies
 
 
 <ul>
 <li>
 Strong leadership and team management capabilities.
 </li>
 <li>
 Ability to navigate complexity and make strategic decisions.
 </li>
 <li>
 Deep understanding of regulatory frameworks and compliance standards.
 </li>
 <li>
 Critical thinking and problem-solving skills.
 </li>
 <li>
 Excellent communication and stakeholder management skills.
 </li>
 <li>
 Project management, strategic planning, and process improvement skills.
 </li>
 <li>
 Data analytics and quality management expertise.
 </li>
 <li>
 Attention to detail and commitment to ethical conduct.
 </li>
 </ul>
 
 
</div>

Corporate Risk & Compliance Manager

The Arab Investment Company

<div>
 
 
 About the Company
 
 
 
 The Arab Investment Company (TAIC) is a Pan-Arab joint-stock company established in July 1974 and owned by governments of 16 Arab states with an authorized capital of US$ 1,200 Million and a paid-up capital of US$ 917 million.
 
 
 
 
 
 
 About the Role
 
 
 
 To implement a robust risk management framework ensuring that TAIC adheres to all relevant / applicable laws &amp; regulations, including identification, assessment, measurement, mitigation, reporting of key potential risks and promotes a culture of integrity and ethical behavior.
 
 
 Risk Manager
 
 
 reports to the Head of GRC
 
 
 
 
 
 
 Responsibilities
 
 
 <ul>
 <li>
 Support the development and implementation of the Company&rsquo;s enterprise-wide Risk management strategy
 </li>
 <li>
 Develop and implement a robust risk management framework including but not limited to credit, market, operational and liquidity for identifying, assessing, monitoring, mitigating and reporting on risks
 </li>
 <li>
 Develop, propose, maintain and monitor Company&rsquo;s risk appetite, ensuring appropriate cascades to all functions
 </li>
 <li>
 Monitor adherence to established risk limits and escalate breaches or near-misses through formal reporting channels
 </li>
 <li>
 Conduct regular risk assessments to identify and evaluate potential risks and liaise with function heads to develop risk mitigation plans to address identified risks
 </li>
 <li>
 Develop TAIC&rsquo;s risk register to log the identified risks and conduct periodically follow ups on mitigations actions and report findings to the Head of GRC and Governance, Risk and Compliance Committee
 </li>
 <li>
 Establish and maintain credit and counterparty risk assessment frameworks and exposure limits
 </li>
 <li>
 Monitor counterparty exposures across all asset classes, ensuring compliance with approved credit limits and tiering frameworks
 </li>
 <li>
 Ensure implementation of country limits management framework in line with approved IPS
 </li>
 <li>
 Support the implementation of pre- and post-trade risk controls, ensuring investment activity adheres to TAICs portfolio restrictions and regulatory requirements (where applicable)
 </li>
 <li>
 Support Head of GRC to review the investment proposals and formulate a risk memo
 </li>
 <li>
 Develop / update stress testing framework and carry out stress testing periodically
 </li>
 <li>
 Oversee operational due diligence (ODD) reviews of external investment managers to assess operational risk, ensuring findings are integrated into investment decision-making and risk reporting processes
 </li>
 <li>
 Develop and deliver training programs to educate employees on risk issues and promote a risk aware culture
 </li>
 <li>
 Support the implementation of the risk management program through establishment and regular updates of policies/procedures, enforcement and monitoring
 </li>
 <li>
 Identification, assessment, measurement, mitigation and reporting of Market and Liquidity risk of the Company
 </li>
 <li>
 Prepare and present enterprise risk reports to the Head of GRC, and senior leadership, highlighting emerging risks, portfolio analysis, portfolio concentrations across multiple dimensions and report early warning indicators, if any and mitigation strategies.
 </li>
 <li>
 Assist in implementation and on-going management of appropriate risk systems and tools for effective management, measurement, mitigation and reporting of various risks.
 </li>
 <li>
 Review and assess the risks associated with new initiatives i.e., products, services, Systems and also suggest changes to existing activities or products, and implement controls to mitigate those risks.
 </li>
 <li>
 Develop and maintain Business Continuity Policy and Disaster Recovery Plan, working with key stakeholders within TAIC
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in business administration, Law, Finance or a relevant discipline, with a minimum of 10 years of experience in governance, risk and compliance
 
 or
 
 postgraduate degree in a relevant discipline, with a minimum of 8 years of experience in governance, risk and compliance
 </li>
 <li>
 Professional Certification as PRM, FRM or similar
 </li>
 <li>
 Relevant experience in investment firms, asset management, or financial institutions.
 </li>
 <li>
 Proven experience in developing and implementing enterprise-wide risk frameworks.
 </li>
 <li>
 Hands-on experience in managing Investment, Market, Credit, Liquidity and Operational Risks including Business Continuity.
 </li>
 <li>
 Working knowledge of Stress Testing and Risk Appetite frameworks.
 </li>
 </ul>
 
 
 
 
 
 Required Technical Skills
 
 
 <ul>
 <li>
 Support Head of GRC
 </li>
 <li>
 Develop and implement
 </li>
 <li>
 Monitor counterparty
 </li>
 <li>
 Prepare and present enterprise risk
 </li>
 <li>
 Review and assess the risks
 </li>
 </ul>
 
 
 
 
 
 Required Soft Skills
 
 
 <ul>
 <li>
 Teamwork
 </li>
 <li>
 Integrity
 </li>
 <li>
 Stakeholder Focus
 </li>
 <li>
 Accountability
 </li>
 </ul>
 
 
</div>

Risk Manager

JPMorganChase

<div>JOB DESCRIPTION 
If you are interested in working in a fast-paced and dynamic environment, aiming to identify emerging themes and adequately addressing those apply for the role! The Saudi Anti-Fraud Location Control Management is responsible for the implementation and execution of governance and controls over operational risk. The Controls group works in close partnership with the Business Control Managers (BCMs) and Operation Control Managers (OCMs) and other JP Morgan Control teams that support activities locally, regionally, and globally and is functionally aligned to CIB Finance and Business Management and EMEA Regional Control Management.
As Anti-Fraud and Location Control Manager you will manage operational risk for the Riyadh Branch Legal Entity and chair Counter Fraud Governance committee (CFGC), LORCCs (Location Operational Risk Committees), and Regulatory Change Forums (RCFs). You will have to report and escalate to the Regional Governance committees and be a member of the Location Management Committee (LMC).
Job responsibilities<ul>
<li>Supports country control initiatives which include the coordination of the Legal Entity Risk Assessments (LERA) for operation and fraud risk assessment and appetite
</li><li>Oversees the location control environment and provide a consolidated view of operational risk controls for the location to ensure problems are promptly escalated and remediated; ensure appropriate governance, coordination and execution of Global Control Projects and cross LOB Programs</li>
<li>Is a part of the LORCC, CFGC, RCF and Outsourcing Forums and participates in applicable location and regional committees</li>
<li>Provides coverage of Legal Entity control matters and coordinate internal control regulatory deliverables across local and regional aligned functions (includes management of regulatory request and interaction with the Regulator)</li>
<li>Facilitates review for Legal Entity attestations and works in partnership with Business Controls Managers (BCM&rsquo;s)/Central Control Office to advise on and coordinate responses to regional/local regulatory inquiries and exams</li>
<li>Partners with the business to prepare for location specific audits and support the implementation of Corporate owned polices in country, including review and identification of local gaps. Supports Internal and External Audits, Operational Risk Management and Compliance work in the execution of reviews</li>
<li>Partners with the BCMs to review results from the risk and control self-assessment process to identify issues and themes impacting the local control environment.</li>
<li>Managing Counter fraud regulatory inspection, reporting and control environment.
</li><li>Conduct fraud relation investigation and ensure managing information internally and reporting to the regulator on a timely manner.</li></ul>
Required qualifications, capabilities, and skills
<ul><li>An in-depth understanding of fraud risks in the financial sector</li>
<li>Strong knowledge of digital fraud threats and common typologies, along with emerging trends impacting financial sector organizations and their customers</li>
<li>Ability to design and implement technology and controls based on use-cases to mitigate fraud risks and threats</li>
<li>The use of data and analytics to proactively prevent fraud and protect customers</li>
<li>Fluent Arabic language</li>
<li>Take ownership of issues and lead them to resolution, highly motivated self- starter</li>
<li>Strong team player with solid influencing skills, able to partner with departments in a global organization</li>
<li>Strong organizational skills, ability to effectively manage tasks under time pressure and constrains</li>
<li>Analytical mind-set, able to identify high-level but also detailed issues</li>
<li>Shows good judgment, maturity, and experience to identify risks and escalate where required</li>
<li>Excellent written and verbal communication skills with the ability to present information in different forms and details based on the audience</li>
<li>Strong in Microsoft Office
</li></ul>ABOUT US 
 
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world&rsquo;s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. 
<div>
<div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. 
</div></div> 
 
ABOUT THE TEAM 
 
J.P. Morgan&rsquo;s Commercial &amp; Investment Bank is a global leader across banking, markets, securities services and payments. Corporations, governments and institutions throughout the world entrust us with their business in more than 100 countries. The Commercial &amp; Investment Bank provides strategic advice, raises capital, manages risk and extends liquidity in markets around the world.</div>

Anti-Fraud and Location Control Manager

York Towers

<div>
 York Holding Group is a diversified investment and development group with a portfolio spanning real estate, technology, and financial innovation. The group operates through three specialized business verticals that complement each other to drive growth across the real estate ecosystem, from large-scale property development, to next-generation PropTech solutions, to a regulated FinTech platform transforming real estate investment through digital tokenization and fractional ownership. United by a shared vision of innovation, transparency, and excellence, York Holding Group continues to shape the future of living, investing, and digital real estate experiences across the region.
 
 
 
 Position:
 
 Compliance Officer
 
 
 
 Department:
 
 Compliance &amp; Risk
 
 
 
 Unit:
 
 Regulatory Compliance Unit
 
 
 
 About The Company
 
 
 
 A
 
 regulated fintech platform
 
 transforming real estate investment through
 
 tokenization and fractional ownership
 
 . The platform connects investors with vetted, income-generating real estate opportunities, blending traditional real estate security with fintech innovation.
 
 
 With operations launching by
 
 mid-next year
 
 , the company is building a world-class team to lead the region&rsquo;s move toward digital, transparent, and compliant real estate investment solutions.
 
 
 
 Position Summary
 
 
 
 The
 
 Compliance Officer
 
 will design, implement, and oversee the company&rsquo;s compliance framework in accordance with
 
 CMA, SAMA, and AML/CFT regulations
 
 . This position will be based in
 
 Saudi Arabia
 
 and acts as the primary liaison with regulatory authorities.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Develop and maintain compliance policies, frameworks, and manuals.
 </li>
 <li>
 Serve as the main point of contact with CMA for inspections and filings.
 </li>
 <li>
 Conduct internal reviews, AML audits, and regulatory reporting.
 </li>
 <li>
 Deliver staff training on ethics, AML, and compliance obligations.
 </li>
 <li>
 Report compliance breaches directly to the Board and CMA.
 </li>
 <li>
 Ensure readiness for CMA licensing and FinTech Lab approval.
 
 
 </li>
 </ul>
 
 Regulatory &amp; CMA Compliance
 
 
 
 <ul>
 <li>
 Acts as the Controlled Function &ndash; Compliance Officer under CMA APR.
 </li>
 <li>
 Ensures compliance with AML Laws, FinTech Lab Standards, and Authorized Persons Regulations.
 </li>
 <li>
 Maintains awareness of CMA circulars and enforcement practices.
 
 
 </li>
 </ul>
 
 Qualifications &amp; Experience
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Law, Finance, or Business; ICA certification preferred.
 </li>
 <li>
 5+ years in compliance, legal, or audit within financial services or fintech.
 </li>
 <li>
 Strong knowledge of CMA and SAMA regulatory frameworks.
 </li>
 <li>
 Excellent reporting and communication skills.
 </li>
 <li>
 Required Certifications: CME-1B, CME-2A, and CME-2B (exemptions apply for ICA Advanced Certificate holders).
 </li>
 <li>
 If not available, the company will sponsor the required CME certifications (as mandated by the CMA) before licensing.
 
 
 </li>
 </ul>
 
 Reporting Line
 
 
 
 Reports functionally to the
 
 Board of Directors
 
 and administratively to the
 
 Chief Executive Officer (CEO)
 
 .
 
 
 
 Work Location
 
 
 
 📍 Riyadh, Saudi Arabia
</div>

Compliance Officer (Fintech)

Devoteam

<div>Company Description 
We are entrepreneurs in disruptive technology, at Devoteam, we deliver innovative technology consulting for business. Digital Transformakers, we are 7,000+ professionals across EMEA dedicated to ensuring our clients win their digital battle. We improve business performance making their companies truly digital. We advise our clients and build IT infrastructure for digital, making sure people are along for the ride. 
 
Devoteam Middle East, we are the region's leading consulting firm delivering innovative Business &amp; Technology Consulting &amp; Solutions. Our 14 years of existence anchored in technologies that enables our clients business to flourish, accordingly our focus is to help our clients' win the digital battle, adapted to our clients&rsquo; business challenges, with a unique consideration to its impact on their systems and structures. 
 
To know more about us, please visit: www.devoteam.com 
Job Description 
<ul><li>
Lead GRC and cybersecurity projects for enterprise clients.</li><li>
Assess, design, and implement security frameworks, policies, and controls.</li><li>
Conduct risk assessments, audits, and compliance reviews.</li><li>
Advise clients on regulatory requirements (ISO 27001, NIST, GDPR, etc.).</li><li>
Collaborate with cross-functional teams to strengthen security posture.</li></ul> 

Qualifications 
<ul><li>
7+ years in cybersecurity, GRC, or related roles.</li><li>
Strong knowledge of cybersecurity frameworks and compliance standards.</li><li>
Excellent problem-solving and communication skills.</li><li>
Proven experience leading client engagements and projects.</li></ul> 

Additional Information 
Business Unit: Cybertrust
Level: Mid - Senior Level
Knowing that success is the result of collaboration. Alone, we go faster, but together, we go further.
To know more about us, please visit: www.devoteam.com</div>

Senior Cyber Security GRC Consultant

MEDGULF Saudi Arabia

<div>
 
 SUMMARY:
 
 
 
 
 
 The Technology &amp; Cyber Security Risk Senior Manager is responsible for identifying, assessing, and mitigating enterprise-level IT and cybersecurity risks to strengthen MedGulf&rsquo;s technology risk posture and resilience. This role plays a critical part in safeguarding MedGulf's digital assets, IT infrastructure, and business-critical applications while aligning with regulatory requirements (e.g., SAMA, Insurance Authority, NCA) and industry best practices (ISO 27001, ISO 31000). Key responsibilities include developing and implementing risk management frameworks, assessing emerging technology risks, fostering a risk-aware culture, and driving cross-functional collaboration to enhance MedGulf&rsquo;s overall technology resilience.
 
 
 
 
 
 
 
 
 ACCOUNTABILITIES &amp; ACTIVITIES:
 
 
 
 
 
 - Risk Management:
 
 
 
 
 
 &bull; Develop and implement an IT &amp; Cybersecurity risk management framework aligned with MedGulf&rsquo;s enterprise risk management approach and risk appetite, IT Governance Framework (ITGF), Cybersecurity Framework (CSF), and ISO 27001.
 
 
 &bull; Identify, assess, and mitigate technology, cybersecurity, data privacy, and cloud security risks that could impact MedGulf&rsquo;s operations, business continuity, data, and regulatory compliance.
 
 
 &bull; Conduct regular technology risk assessments to proactively identify and address emerging risks.
 
 
 &bull; Recommend and oversee the implementation of risk mitigation controls, continuously monitoring risk exposure.
 
 
 &bull; Develop and track Key Risk Indicators (KRIs) to monitor and prioritize critical IT and cybersecurity risks.
 
 
 &bull; Provide input to the Enterprise Risk Management (ERM) team on risk appetite, governance frameworks, and policies.
 
 
 &bull; Collaborate with IT and cybersecurity teams to design, test, and enhance IT risk controls.
 
 
 &bull; Provide independent oversight of IT &amp; cybersecurity risk controls implemented by IT and Security teams.
 
 
 &bull; Engage with third party responsible for performing penetration testing, and to update the IT &amp; Cybersecurity risk profile.
 
 
 &bull; Perform independent assessment of SOC to ensure that vulnerabilities are assessed, and addressed timely.
 
 
 
 
 
 - Technology Resilience and Incident Management :
 
 
 &bull; Assess and manage risks related to new technologies, third-party vendors, cloud services, and digital transformation initiatives.
 
 
 &bull; Conduct risk-based testing on IT systems, applications, and infrastructure to ensure operational resilience.
 
 
 &bull; Lead and participate in root cause analysis, investigations, and remediation efforts for technology-related incidents reported to the Risk Management division.
 
 
 &bull; Coordinate response efforts for major IT incidents or system failures that could disrupt MedGulf&rsquo;s operations.
 
 
 &bull; Ensure IT risk assessment is integrated into Business Continuity (BCM) and Disaster Recovery (DR)
 
 
 strategies, ensuring IT &amp; cybersecurity risks are addressed in crisis management planning.
 
 
 &bull; Review the accuracy and rationality of periodic self-assessment against maturity level of Cybersecurity Framework before submission with regulator.
 
 
 &bull; Analyze emerging cyber threats, conduct forensic analysis, and provide risk-based reporting to senior management and cybersecurity leadership.
 
 
 
 
 
 - Risk Awareness &amp; Reporting :
 
 
 
 
 
 &bull; Develop and deliver IT &amp; Cybersecurity risk awareness programs to promote a risk-conscious culture among MedGulf employees.
 
 
 &bull; Provide regular risk reports and insights to executive management, highlighting key technology risk trends and mitigation strategies.
 
 
 &bull; Present risk assessment findings, remediation plans, and compliance updates to executive stakeholders and governance committees.
 
 
 &bull; Support internal audit and external regulatory audits, ensuring IT and cybersecurity risk areas are assessed and mitigated proactively.
 
 
 
 
 
 - IT Strategy, Governance &amp; Compliance :
 
 
 
 
 
 &bull; Establish and oversee the IT Governance Framework in alignment with SAMA ITGF, ISO 27001, and NIST standards.
 
 
 &bull; Ensure IT risk management is integrated into overall IT governance and strategic decision-making processes.
 
 
 &bull; Review the cybersecurity strategy to ensure its alignment with the business objectives, and to create cyber resilience across all the processes.
 
 
 &bull; Collaborate with IT, Compliance, and Risk Committees to ensure IT governance aligns with corporate governance objectives.
 
 
 &bull; Develop and enforce IT risk policies, standards, and procedures, ensuring alignment with enterprise risk management (ERM) frameworks.
 
 
 &bull; Participate in IT Steering Committee (ITSC) and Risk Committee discussions, providing IT risk insights to governance bodies.
 
 
 &bull; Manage third-party IT risk governance, ensuring vendor risk assessments, contract security clauses, and compliance reviews are in place.
 
 
 &bull; Evaluate and provide risk advisory on major IT investments, ensuring alignment with business objectives and compliance with SAMA regulations.
 
 
 &bull; Monitor effectiveness of strategic initiatives and recommend improvements.
 
 
 &bull; Monitor the effectiveness of IT strategic initiatives from a risk perspective and recommend necessary improvements.
 
 
 &bull; Ensure that IT risk management is integrated into IT strategic planning, budgeting, and decision-making.
 
 
 
 
 
 MAIN CONTACTS / OPERATING STAKEHOLDERS :
 
 
 
 
 
 - INTERNAL CONTACT :
 
 
 
 
 
 &bull; Risk Management Executive Director &ndash; engage with executive leadership to communicate and address critical technology risks.
 
 
 &bull; Operational and Resilience Risk Director / ERM Senior Manager &ndash; contribute to risk appetite discussions, governance framework development, KRI tracking, and updates to risk registers.
 
 
 &bull; IT Governance and Infrastructure Teams and Cyber Security Teams &ndash; collaborate on risk mitigation strategies and security controls.
 
 
 &bull; Resilience and Business Continuity Manager &ndash; ensure IT risk considerations are integrated into business continuity and operational resilience planning.
 
 
 &bull; IT Steering Committee &ndash; should provide independent risk oversight within the IT Steering Committee (ITSC) by assessing IT and cybersecurity risks in strategic IT initiatives, digital transformation projects, and major system changes.
 
 
 
 
 
 - EXTERNAL CONTACT :
 
 
 
 
 
 &bull; External Auditors and Consultants &ndash; provide support for IT risk audits, regulatory assessments, and compliance reviews.
 
 
 &bull; Third-Party Vendors and Service Providers &ndash; evaluate and monitor IT risk exposure from outsourced services, cloud providers, and key technology partners.
 
 
 &bull; Regulators &ndash; should ensure compliance with regulatory requirements (e.g., SAMA IT Governance Framework, NCA Cybersecurity Controls) by overseeing IT risk assessments, responding to regulatory inquiries, and coordinating audits.
 
 
 
 
 
 - WORKING ENVIRONMENT:
 
 
 
 
 
 &bull; Cross-functional collaboration with Enterprise Risk, Operational Risk, IT, Cybersecurity, Governance, and Business Continuity teams to ensure an integrated approach to technology risk management.
 
 
 &bull; Regular engagement with executive leadership and key stakeholders to provide risk insights, support decision-making, and enhance IT risk governance.
 
 
 &bull; Interaction with external auditors, regulators, and third-party service providers to facilitate compliance reviews, audits, and vendor risk assessments.
 
 
 &bull; Office-based work, with occasional travel for risk assessments and stakeholder engagements as needed.
 
 
 &bull; Fast-paced and dynamic environment, requiring adaptability to evolving regulatory requirements, emerging technology threats, and risks.
 
 
 
 
 
 - QUALIFICATIONS/REQUIREMENTS:
 
 
 
 
 
 &bull; Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Information Systems, Cybersecurity, Risk Management, or a related field.
 
 
 &bull; 7+ years of experience in IT risk management, preferably within the insurance or financial services sector.
 
 
 &bull; Strong background in IT governance, risk, and compliance (GRC), with expertise in regulatory requirements (e.g., SAMA, NCA, Insurance Authority) and industry best practices (e.g., ISO 27001, ISO 31000).
 
 
 &bull; Experience in risk assessments, control design, third-party/vendor risk management, and IT audits.
 
 
 &bull; Prior experience in business continuity and incident management is an advantage.
 
 
 
 
 
 - CERTIFICATIONS :
 
 
 
 
 
 &bull; CISA, CISSP, CISM, CRISC, or equivalent risk/security certifications.
 
 
 &bull; ITIL, ISO 22301, or BCM-related certification is a plus.
 
</div>

Technology & Cyber Security Risk Senior Manager

Explore 3116+ Risk and compliance manager in Riyadh this November. Find roles across top companies and apply now to boost your career.