Digital GRC Section Head

Role Purpose

Lead IT governance, risk, and compliance (GRC) activities at Saudi Air Navigation Services across digital platforms, ensuring risk control, audit preparedness, regulatory compliance, and embedding governance frameworks within IT operations. Guide third-party risk management and produce actionable reports for senior leadership.

Key Responsibilities

• Develop, maintain and enforce IT governance frameworks and policies across the organization’s technology environment, aligning with legal standards, regulations, and industry best practices.
• Provide regular, structured compliance and governance reports to the section leadership.
• Conduct enterprise-wide IT risk evaluations, manage a central risk register with defined ownership and remediation deadlines.
• Prioritize IT vulnerabilities by business impact and collaborate with architecture, infrastructure, and security teams for issue resolution.
• Promote a culture aware of risk management across IT teams through training and operational guidelines.
• Manage compliance to various standards such as ISO, NCA, GDPR ensuring digital systems are audit-ready.
• Coordinate control testing, gap analysis, remediation efforts and audit responses while maintaining robust evidence records.
• Oversee vendor GRC maturity assessments, enforce contractual risk clauses, and monitor third-party compliance through SLA reviews, certifications, or audits.
• Create and maintain GRC performance metrics and dashboards reflecting risk posture, audit outcomes, remediation progress, and compliance levels.
• Deliver frequent updates to leadership and governance committees and implement continuous GRC improvements via benchmarking and maturity assessments.
• Support daily compliance monitoring and identify process improvement opportunities for cost and productivity gains.
• Lead and mentor GRC team members by assigning responsibilities, monitoring workflows, and fostering a results-driven environment in line with organizational values.

Qualifications & Requirements

• At least 6 years of relevant professional experience in IT governance, risk, or compliance roles.
• A bachelor’s degree in Engineering, Computer Science, IT, or a related field is mandatory.
• Preferred credentials include certifications in audit, assurance, risk management, KPI-P, compliance, and internal control frameworks.