Company Description Hashi Basha Holding Co., established in 2016, is a leading organization in Saudi Arabia's restaurant and food manufacturing industry. With over 145 branches worldwide, the company specializes in developing and managing restaurants based on a franchising concept. Guided by values of social responsibility, safety, and quality, Hashi Basha continually strives to enhance customer satisfaction through its products and services. The company envisions becoming a top choice for customers in Saudi Arabia and the Gulf region, with a dedicated goal of delivering superior flavors, high-quality services, and impacting the investment market.
Role Description
The GRC Specialist plays a central role in strengthening the organization’s governance framework, ensuring compliance with Saudi regulations, and managing operational and financial risks across all restaurant branches. The role supports leadership in building a culture of accountability, transparency, and continuous improvement. This includes developing policies, monitoring compliance, assessing risks, and coordinating audits to ensure the company operates efficiently, ethically, and in line with regulatory requirements.
Key Responsibilities
Governance
Develop, update, and maintain internal policies, SOPs, and governance frameworks aligned with company strategy and Saudi regulations. Ensure consistent implementation of policies across all the departments.
Support management in establishing internal controls and performance monitoring mechanisms.
Risk Management
Conduct risk assessments covering operational, financial, food safety, IT, and reputational risks. Maintain the corporate risk register and track mitigation plans with relevant departments. Identify control gaps and recommend practical, business-friendly solutions. Monitor emerging risks in the F&B sector and advise leadership accordingly. Compliance
Ensure compliance with Saudi laws and regulatory bodies (MOMRAH, SFDA, GAZT/ZATCA, Ministry of Labor, Civil Defense, etc.). Monitor branch-level compliance with food safety, hygiene, licensing, and operational standards. Coordinate internal compliance reviews and follow up on corrective actions. Support external audits and regulatory inspections.
Audit & Reporting Plan and execute internal audits for branches and support functions. Prepare audit reports, highlight findings, and track closure of corrective actions. Provide periodic GRC dashboards and KPIs to senior management. Support digital transformation of GRC processes (e.g., automated checklists, compliance tracking tools).
Qualifications Bachelor’s degree in Business Administration, Accounting, Finance, Law, or a related field. Professional certifications preferred: CRISC, ISO 31000, ISO 27001, CIA, CISA, CGRC (or progress toward them).2–5 years of experience in GRC, internal audit, compliance, or risk management—preferably in F&B, retail, hospitality, or multi-branch operations. Strong understanding of Saudi regulatory requirements (SFDA, MOMRAH, ZATCA, MOL, Civil Defense). Experience in policy development, risk assessment, and internal controls.
Key Skills Technical Skills Knowledge of GRC frameworks and best practices. Strong understanding of operational risks in restaurants (food safety, cash handling, procurement, inventory, HSE). Ability to conduct audits and prepare structured reports. Familiarity with digital GRC tools, dashboards, and compliance systems. Understanding of data privacy and information security basics. Soft Skills Strong analytical and problem‑solving abilities. Excellent communication skills in Arabic and English. High attention to detail and strong documentation skills. Ability to work cross‑functionally with operations, HR, finance, and supply chain. Integrity, professionalism, and the ability to handle sensitive information.