Banking GRC Expert - Service Now - SME

Banking GRC Expert – Subject Matter Expert (SME)Location: Riyadh, KSARole OverviewThe Banking GRC Expert will act as a trusted advisor and Subject Matter Expert (SME) for Governance, Risk, and Compliance across the Bank. This role is accountable for ensuring full alignment with SAMA regulations, NCA cybersecurity standards, and other applicable Saudi regulatory frameworks.The incumbent will lead the design, implementation, and continuous enhancement of an integrated GRC framework that supports regulatory compliance, operational resilience, digital transformation, and sustainable business growth. This role interfaces extensively with senior management, Board Committees, regulators, and internal audit functions.Key Responsibilities1. Regulatory Governance & Strategic AdvisorySAMA Regulatory Leadership:SAMA Cybersecurity Framework (CSF)SAMA IT Governance FrameworkSAMA Risk Management & Compliance guidelinesGRC Framework Design:Corporate GovernanceEnterprise Risk Management (ERM)Regulatory ComplianceBoard & Executive Reporting:Board Risk CommitteeAudit CommitteeExecutive Management2. Enterprise Risk Management & ResilienceERM Leadership:Operational RiskCredit RiskStrategic & Emerging RisksDigital & Technology Risk:Digital banking initiativesFintech partnershipsCloud, data, and emerging technologiesEnsure compliance with SAMA consumer protection and data privacy requirements.KRI & Risk Register Management:Define and monitor Key Risk Indicators (KRIs) and maintain an up-to-date enterprise Risk Register aligned with the Bank’s risk appetite.3. Compliance, Audit & Regulatory EngagementNCA Compliance Oversight:NCA Essential Cybersecurity Controls (ECC)Critical Systems Cybersecurity Controls (CSCC)Regulatory Gap Assessments:Conduct periodic gap analyses, thematic reviews, and regulatory readiness assessments; oversee remediation plans and closure of findings.Regulatory & Audit Liaison:SAMA inspectionsExternal auditorsInternal audit reviewsEnsure timely and effective resolution of all supervisory observations.4. Advisory, Enablement & Risk CultureSubject Matter Advisory:AML/CFT regulationsBasel III/IV frameworksSharia compliance (where applicable)Risk Culture & Awareness:Targeted training programsExecutive workshopsPolicy awareness initiativesRequired Qualifications & ExperienceEducationBachelor’s degree in Finance, Risk Management, Law, Information Systems, or related disciplineMaster’s degree / MBA preferredProfessional Experience10–15 years of progressive experience in Banking GRC, preferably within KSA or the GCCDemonstrated experience engaging with SAMA, NCA, and regulatory auditsStrong exposure to digital banking and technology risk environmentsCertifications (At least two preferred)CRISC – Certified in Risk and Information Systems ControlCGEIT – Certified in Governance of Enterprise ITCAMS – Certified Anti-Money Laundering SpecialistCISA – Certified Information Systems AuditorSAMA / Financial Academy Professional Certifications (e.g., Compliance Foundations)Regulatory & Technical KnowledgeExpert-level understanding of:SAMA regulations and supervisory expectationsNCA cybersecurity frameworksCMA regulations (as applicable)Leadership & Soft SkillsStrong executive presence and stakeholder management capabilityAbility to influence C-suite and Board-level discussionsExcellent analytical, presentation, and documentation skillsBilingual proficiency in Arabic and English#J-18808-Ljbffr