Senior Developer- IRM, TPRM & BCM

Location: Riyadh, Riyadh, Saudi Arabia

Senior GRC Consultant (GRC | BCM | TPRM)

Location: Riyadh, Saudi Arabia
Experience: 7–12+ Years
Employment Type: Full-Time
Relocation: Candidates must be willing to relocate to Riyadh, Saudi Arabia.

Job Summary

We are seeking an experienced Senior GRC Consultant to lead the design, implementation, customization, and optimization of Governance, Risk & Compliance (GRC) solutions. The ideal candidate will have strong expertise in Integrated Risk Management (IRM), Business Continuity Management (BCM), Third-Party Risk Management (TPRM), Policy & Compliance, and platform development. The role requires extensive experience in solution architecture, workflow automation, integrations, and implementation of regulatory compliance frameworks.

Key Responsibilities

• Design, architect, and implement end-to-end GRC/IRM solutions following industry best practices.
• Lead requirement gathering, solution design, technical architecture, and implementation activities.
• Configure and customize GRC modules including:
  • Integrated Risk Management (IRM)
  • Policy & Compliance
  • Business Continuity Management (BCM)
  • Third-Party Risk Management (TPRM)
  • Risk Management
  • Audit Management
• Conduct entity scoping exercises and design enterprise GRC data models.
• Configure policies, controls, indicators, risk frameworks, assessments, attestation campaigns, audit test plans, and compliance processes.
• Customize workflows using Flow Designer, Integration Hub, and Workflow Engine.
• Develop custom and scoped applications.
• Build and customize Service Portal components and widgets.
• Develop and maintain Business Rules, Script Includes, Client Scripts, UI Policies, UI Actions, Scheduled Jobs, Fix Scripts, Email Inbound Actions, and Notifications.
• Design, develop, and maintain REST and SOAP integrations with enterprise systems.
• Develop Scripted REST APIs and Scripted SOAP Services.
• Configure authentication mechanisms including OAuth 2.0, Certificates, and MID Server integrations.
• Develop and customize Integration Hub Spokes.
• Implement Performance Analytics dashboards and KPI reporting.
• Review existing implementations and recommend improvements aligned with best practices.
• Collaborate with business stakeholders, security teams, auditors, and compliance teams to deliver enterprise governance solutions.
• Ensure scalable, secure, and maintainable implementations.
• Stay updated with the latest platform capabilities, releases, and GRC enhancements.

Required Technical Skills

Platform

• IRM (Integrated Risk Management)
• Governance, Risk & Compliance (GRC)
• Business Continuity Management (BCM)
• Third-Party Risk Management (TPRM)
• Policy & Compliance
• Risk Management
• Audit Management
• Performance Analytics
• Service Portal
• Flow Designer
• Integration Hub
• Integration Hub Spokes
• MID Server

Development

• JavaScript
• Glide API
• Business Rules
• Script Includes
• Client Scripts
• UI Policies
• UI Actions
• Fix Scripts
• Scheduled Jobs
• Email Inbound Actions
• Notifications
• Scoped Applications
• Service Portal Widgets

Integration

• REST APIs
• SOAP APIs
• Scripted REST APIs
• Scripted SOAP Services
• OAuth 2.0
• Certificate-based Authentication
• Web Services
• JSON
• XML

Compliance & Governance

• Governance, Risk & Compliance (GRC)
• Business Continuity Management (BCM)
• Third-Party Risk Management (TPRM)
• Enterprise Risk Management
• Policy Management
• Compliance Management
• Audit Management
• Internal Controls
• Risk Frameworks
• Assessments
• Attestation
• Control Testing

Required Experience

• 7–12+ years of overall IT experience.
• 5+ years of hands-on experience implementing GRC/IRM solutions.
• Strong understanding of Governance, Risk & Compliance concepts and methodologies.
• Proven experience designing enterprise GRC architectures.
• Extensive experience configuring and customizing GRC modules.
• Experience developing enterprise integrations using REST, SOAP, and Integration Hub.
• Hands-on experience with Service Portal customization and widget development.
• Experience building custom applications.
• Strong scripting and automation experience within the platform.
• Experience implementing Performance Analytics dashboards and reporting.
• Experience conducting entity scoping and governance assessments.
• Experience reviewing and optimizing existing implementations.
• Strong understanding of platform architecture, plugins, and accelerators.

Regulatory & Industry Knowledge

Candidates should have experience implementing governance and compliance requirements aligned with one or more of the following:

• SAMA Cybersecurity Framework
• NCA ECC (Essential Cybersecurity Controls)
• IT Governance Framework (ITGF)
• Business Continuity Management (BCM)
• ISO 27001
• ISO 22301
• ISO 31000
• GDPR
• COBIT
• NIST
• PCI DSS (preferred)

Preferred Certifications

• Certified System Administrator (CSA)
• Certified Application Developer (CAD)
• Certified Implementation Specialist – Risk and Compliance (CIS-RC)
• Certified Implementation Specialist – IRM (preferred)
• Certified Technical Architect (CTA) (preferred)
• ITIL Foundation Certification
• ISO 27001 Lead Implementer or Lead Auditor (preferred)
• CRISC, CISA, or CGEIT (preferred)