Job Specific Accountabilities:

Governance

• Manage the development and maintenance of corporate governance frameworks, including policies, procedures, and organizational structures.
• Actively lead the policy and procedure development process, as both a leader and contributor.
• Facilitate and document governance committee meetings and actions.
• Collaborate with senior management to ensure governance structures align with organizational objectives.

Risk Management

• Lead regular risk assessments and oversee the organization's enterprise risk register and enterprise risk indicators.
• Develop and manage risk mitigation strategies in collaboration with business units.
• Manage key risk indicators (KRIs) and prepare periodic risk reports.
• Lead the implementation of enterprise risk management (ERM) frameworks.

Compliance

• Oversee changes in regulations relevant to the Saudi business environment (including, without limitation, Companies Law SAMA, ZATCA, Ministry of Commerce requirements and so on).
• Oversee the work of global subsidiaries in the management of their compliance obligations.
• Manage compliance reviews and audits to ensure adherence to regulatory requirements and internal policies.
• Lead the development and implementation of compliance monitoring plans and testing protocols.
• Manage engagement with external auditors during compliance assessments.
• Manage the implementation of remediation plans for identified compliance gaps.
• Manage the Documentation of regulatory findings and corrective action plans.

GRC Processes

• Lead the design and operating effectiveness of internal GRC processes.
• Manage key control processes and procedures.
• Manage the implementation of control frameworks (such as COSO, ISO 31000).
• Identify control weaknesses and recommend improvements.
• Develop and lead training and awareness programs.
• Manage the development and organizational integration of the GRC function into THC.

Reporting and communication

• Manage comprehensive GRC reports for executive management and the board.
• Communicate GRC issues and developments to relevant stakeholders.
• Lead the development and maintenance of GRC dashboards and metrics.

Leadership

• Monitor staff achievements, perform periodic performance appraisals, and provide guidance, coaching or training to direct subordinates in performing their delegated duties.
• Optimize the use of personal and team time/effort in carrying out assigned duties, to ensure work meets agreed standards for timeliness and quality.
• Ensure continuous monitoring of trends in the market and provide advice to management on potential initiatives.
• Support the execution of the overall strategic vision.
• Maintain confidentiality in all matters related to work and information.

Desired Candidate Profile

• Bachelor s degree in accounting, Finance, Business Administration, Law, Information Systems, or a related field.
• Professional certification in at least one of the following is required: o Certified Internal Auditor (CIA) o Certified Risk and Compliance Management Professional (CRCMP) o Certified in Risk Management Assurance (CRMA) o Certification in Control Self-Assessment (CCSA) o ISO 31000 Risk Manager is preferred.
• Master s degree is preferred.
• 9 years of progressive experience in GRC, internal audit, enterprise risk management, or compliance, with at least 3-5 years in a leadership or managerial role.
• Strong knowledge of Saudi Arabian regulatory and compliance requirements (SAMA, ZATCA, MoC, etc.).
• Demonstrated experience in developing and leading ERM and compliance frameworks.
• Hands-on experience conducting regulatory audits and managing remediation plans.
• In-depth understanding of governance models, control frameworks (COSO, ISO), and risk assessment methodologies.
• Proficiency in GRC technology platforms such as MetricStream, ServiceNow, SAP GRC, etc.
• High-level project management capabilities and experience in cross-functional coordination.
• Ability to communicate effectively with senior management and board-level stakeholders.