Banking GRC Expert - SME

Banking GRC Expert – Subject Matter Expert (SME)Location: Riyadh, KSARole OverviewThe Banking GRC Expert will act as a trusted advisor and Subject Matter Expert (SME) for Governance, Risk, and Compliance across the Bank. This role is accountable for ensuring full alignment with SAMA regulations, NCA cybersecurity standards, and other applicable Saudi regulatory frameworks. The incumbent will lead the design, implementation, and continuous enhancement of an integrated GRC framework that supports regulatory compliance, operational resilience, digital transformation, and sustainable business growth. This role interfaces extensively with senior management, Board Committees, regulators, and internal audit functions.Key Responsibilities1. Regulatory Governance & Strategic AdvisorySAMA Regulatory Leadership: Serve as the Bank’s primary SME for SAMA Banking Rules, Circulars, and supervisory expectations, including:SAMA Cybersecurity Framework (CSF)SAMA IT Governance FrameworkSAMA Risk Management & Compliance guidelinesGRC Framework Design: Design, implement, and maintain an enterprise-wide GRC framework integrating:Corporate GovernanceEnterprise Risk Management (ERM)Regulatory ComplianceBoard & Executive Reporting: Prepare executive‑level dashboards, risk heatmaps, and compliance reports for:Board Risk CommitteeAudit CommitteeExecutive Management2. Enterprise Risk Management & ResilienceERM Leadership: Lead identification, assessment, and mitigation of:Operational RiskCredit RiskStrategic & Emerging RisksDigital & Technology Risk: Oversee risk assessments for:Digital banking initiativesFintech partnershipsCloud, data, and emerging technologiesEnsure compliance with SAMA consumer protection and data privacy requirements.KRI & Risk Register Management: Define and monitor Key Risk Indicators (KRIs) and maintain an up‑to‑date enterprise Risk Register aligned with the Bank’s risk appetite.3. Compliance, Audit & Regulatory EngagementNCA Compliance Oversight: Ensure compliance with:NCA Essential Cybersecurity Controls (ECC)Critical Systems Cybersecurity Controls (CSCC)Regulatory Gap Assessments: Conduct periodic gap analyses, thematic reviews, and regulatory readiness assessments; oversee remediation plans and closure of findings.Regulatory & Audit Liaison: Act as the primary interface for:SAMA inspectionsExternal auditorsInternal audit reviewsEnsure timely and effective resolution of all supervisory observations.4. Advisory, Enablement & Risk CultureSubject Matter Advisory: Provide expert guidance to business and technology teams on:AML / CFT regulationsBasel III / IV frameworksSharia compliance (where applicable)Risk Culture & Awareness: Champion a strong risk‑aware culture through:Targeted training programsExecutive workshopsPolicy awareness initiativesRequired Qualifications & ExperienceEducationBachelor’s degree in Finance, Risk Management, Law, Information Systems, or related disciplineMaster’s degree / MBA preferredProfessional Experience10–15 years of progressive experience in Banking GRC, preferably within KSA or the GCCDemonstrated experience engaging with SAMA, NCA, and regulatory auditsStrong exposure to digital banking and technology risk environmentsCertifications (At least two preferred)CRISC – Certified in Risk and Information Systems ControlCGEIT – Certified in Governance of Enterprise ITCAMS – Certified Anti‑Money Laundering SpecialistCISA – Certified Information Systems AuditorSAMA / Financial Academy Professional Certifications (e.g., Compliance Foundations)Regulatory & Technical KnowledgeExpert‑level understanding of:SAMA regulations and supervisory expectationsNCA cybersecurity frameworksCMA regulations (as applicable)Leadership & Soft SkillsStrong executive presence and stakeholder management capabilityAbility to influence C‑suite and Board‑level discussionsExcellent analytical, presentation, and documentation skillsBilingual proficiency in Arabic and English#J-18808-Ljbffr