Job Specific Accountabilities:

- Governance
- Manage the development and maintenance of corporate governance frameworks, including policies, procedures, and organizational structures.
- Actively lead the policy and procedure development process, as both a leader and contributor.
- Facilitate and document governance committee meetings and actions.
- Collaborate with senior management to ensure governance structures align with organizational objectives.

- Risk Management

- Lead regular risk assessments and oversee the organization's enterprise risk register and enterprise risk indicators.
- Develop and manage risk mitigation strategies in collaboration with business units.
- Manage key risk indicators (KRIs) and prepare periodic risk reports.
- Lead the implementation of enterprise risk management (ERM) frameworks.

- Compliance

- Oversee changes in regulations relevant to the Saudi business setting (including, without limitation, Companies Law SAMA, ZATCA, Ministry of Commerce requirements and so on).
- Oversee the work of global subsidiaries in the management of their compliance obligations.
- Manage compliance reviews and audits to ensure adherence to regulatory requirements and internal policies.
- Lead the development and implementation of compliance monitoring plans and testing protocols.
- Manage engagement with external auditors during compliance assessments.
- Manage the implementation of remediation plans for identified compliance gaps.

• Manage the Documentation of regulatory findings and corrective action plans.
- GRC Processes
- Lead the design and operating effectiveness of internal GRC processes.
- Manage key control processes and procedures.
- Manage the implementation of control frameworks (such as COSO, ISO 31000).
- Identify control weaknesses and recommend improvements.
- Develop and lead training and awareness programs.
- Manage the development and organizational integration of the GRC function into THC.

- Reporting and communication




- Manage comprehensive GRC reports for executive management and the board.
- Communicate GRC issues and developments to relevant stakeholders.

• Lead the development and maintenance of GRC dashboards and metrics.
- Leadership
- Monitor staff achievements, perform periodic performance appraisals, and provide guidance, coaching or training to direct subordinates in performing their delegated duties.
- Optimize the use of personal and team time/effort in carrying out assigned duties, to ensure work meets agreed standards for timeliness and quality.
- Ensure continuous monitoring of trends in the market and provide advice to management on potential initiatives.
- Support the execution of the overall strategic vision.
- Maintain confidentiality in all matters related to work and information.

Qualifications:

- Bachelor’s degree in accounting, Finance, Business Administration, Law, Information Systems, or a related field.
- Professional certification in at least one of the following is required:

o Certified Internal Auditor (CIA)

o Certified Risk and Compliance Management Professional (CRCMP)

o Certified in Risk Management Assurance (CRMA) o Certification in Control Self-Assessment (CCSA)

o ISO 31000 Risk Manager is preferred.

- Master’s degree is preferred.

Experience & Skills:

- 9 years of progressive experience in GRC, internal audit, enterprise risk management, or compliance, with at least 3-5 years in a leadership or managerial role.
- Strong knowledge of Saudi Arabian regulatory and compliance requirements (SAMA, ZATCA, MoC, etc.).
- Demonstrated experience in developing and leading ERM and compliance frameworks.
- Hands-on experience conducting regulatory audits and managing remediation plans.
- In-depth understanding of governance models, control frameworks (COSO, ISO), and risk assessment methodologies.
- Proficiency in GRC technology platforms such as MetricStream, ServiceNow, SAP GRC, etc.
- High-level project management capabilities and experience in cross-functional coordination.
- Ability to communicate effectively with senior management and board-level stakeholders.

📌 Governance, Risk and Compliance Director (Australia)
🏢 THC
📍 Australia