Banking GRC Expert - SME

Overview

Role Overview

+ SAMA IT Governance Framework

• + SAMA Risk Management & Compliance guidelines
• **GRC Framework Design:**
• Design, implement, and maintain an enterprise-wide GRC framework integrating:
• + Corporate Governance

+ Enterprise Risk Management (ERM)

• + Regulatory Compliance
• **Board & Executive Reporting:**
• Prepare executive-level dashboards, risk heatmaps, and compliance reports for:

+ Board Risk Committee

+ Strategic & Emerging Risks

• **Digital & Technology Risk:**
• Oversee risk assessments for:
• + Digital banking initiatives
• + Fintech partnerships
• + Cloud, data, and emerging technologies
• Ensure compliance with SAMA consumer protection and data privacy requirements.
• **KRI & Risk Register Management:**
• Define and monitor Key Risk Indicators (KRIs) and maintain an up-to-date enterprise Risk Register aligned with the Bank’s risk appetite.
• **3.
• Compliance, Audit & Regulatory Engagement*** **NCA Compliance Oversight:**
• Ensure compliance with:

+ Critical Systems Cybersecurity Controls (CSCC)

• **Regulatory Gap Assessments:**
• Conduct periodic gap analyses, thematic reviews, and regulatory readiness assessments; oversee remediation plans and closure of findings.
• **Regulatory & Audit Liaison:**
• Act as the primary interface for:
• + SAMA inspections
• + External auditors
• + Internal audit reviews
• Ensure timely and effective resolution of all supervisory observations.
• **4.
• Advisory, Enablement & Risk Culture*** **Subject Matter Advisory:**
• Provide expert guidance to business and technology teams on:
• + AML / CFT regulations
• + Basel III / IV frameworks
• + Sharia compliance (where applicable)
• **Risk Culture & Awareness:**
• Champion a strong risk-aware culture through:
• + Targeted training programs
• + Executive workshops
• + Policy awareness initiatives

Required Qualifications & Experience

• **Education*** Bachelor’s degree in Finance, Risk Management, Law, Information Systems, or related discipline
• Master’s degree / MBA preferred
• **Professional Experience*** 10–15 years of progressive experience in **Banking GRC**, preferably within **KSA or the GCC**
• Demonstrated experience engaging with **SAMA, NCA, and regulatory audits**
• Strong exposure to digital banking and technology risk environments
• **Certifications (At least two preferred)*** CRISC – Certified in Risk and Information Systems Control
• CGEIT – Certified in Governance of Enterprise IT
• CAMS – Certified Anti-Money Laundering Specialist
• CISA – Certified Information Systems Auditor
• SAMA / Financial Academy Professional Certifications (e.g., Compliance Foundations)
• **Regulatory & Technical Knowledge*** Expert-level understanding of:
• + SAMA regulations and supervisory expectations
• + NCA cybersecurity frameworks
• + CMA regulations (as applicable)
• **Leadership & Soft Skills*** Strong executive presence and stakeholder management capability
• Ability to influence C-suite and Board-level discussions
• Excellent analytical, presentation, and documentation skills
• **Bilingual proficiency in Arabic and English**