IT Governance & Risk Specialist / Manager

Role Overview

Key Responsibilities

• Develop and maintain IT governance frameworks, standards, policies, and procedures.
• Drive compliance with SAMA CSFW, NCA, and NDMO-PDPL requirements.
• Lead IT process improvement and transformation initiatives.
• Oversee IT documentation, policies, procedures, and governance reporting.
• Manage IT audits, controls, compliance assessments, and audit remediation.
• Manage technology risks, KRIs, risk registers, and mitigation plans.
• Maintain IT business continuity and disaster recovery plans, including BIA, TRA, RTO/RPO, and testing.
• Lead ISO implementation and certification activities.
• Collaborate with IT, Risk, Audit, Cybersecurity, and other stakeholders.

Key Requirements

• Hands-on ISO implementation and certification experience for ISO 20000-1, ISO 27001, and ISO 56002.
• Strong IT Governance, Risk & Compliance experience.
• Experience developing and implementing IT governance frameworks, standards, policies, and procedures.
• Experience with IT audits, controls, audit observations, corrective actions, and compliance monitoring.
• Practical experience with the SAMA Cyber Security Framework.
• Knowledge or experience with NDMO-PDPL and NCA guidelines.
• Experience in IT risk management, including risk registers, KRIs, risk assessment, and mitigation.
• Experience with IT business continuity and disaster recovery, including BIA, TRA, IT BCP, RTO, and RPO.
• Strong IT process management and continuous improvement experience.
• Excellent stakeholder management, reporting, documentation, and communication skills.

Preferred Background

• Experience in a regulated environment involving SAMA, NCA, NDMO-PDPL, ISO, IT audit, or technology risk requirements is strongly preferred.