· At least 5 years of relevant GRC, assurance, resilience, or ServiceNow consulting experience, including at least 3 years of hands-on ServiceNow implementation exposure.
· Hands-on practitioner or implementation experience in at least one of the following domains: Compliance Management, Business Continuity Management, or Internal Audit. Experience in more than one is strongly preferred.
· Demonstrated ServiceNow GRC/IRM implementation experience involving at least one relevant product area such as Policy and Compliance, Risk, Audit, or BCM.
· Working knowledge of controls, evidence, issues/findings, remediation, approvals, attestations, assessments, reporting, and audit trails.
· Ability to facilitate business workshops and convert business needs into implementable and testable functional requirements.
· Experience supporting UAT, defect resolution, data validation, and deployment readiness.
· Fluent Arabic language proficiency, spoken and written, is mandatory for this role given direct workshop facilitation with Arabic-speaking policy, compliance, risk, BCM, and audit stakeholders.
· Experience with enterprise or regulated organizations, especially banking or financial services.
· Exposure to regulatory and control frameworks such as SAMA, ISO 27001, ISO 22301, ISO 31000, COSO, COBIT, NIST, or equivalent.
· Experience with third-party risk, operational resilience, regulatory change, control testing, indicators, or issue management.
· Ability to review ServiceNow configuration and flows and communicate effectively with developers and architects.
· Required: Relevant bachelor’s degree such as Information Systems, Computer Science, Engineering, Business Administration, Risk Management, Accounting, Finance, or a related discipline.
· Required: ServiceNow Certified System Administrator (CSA).
· Required or to be obtained within the agreed onboarding period: ServiceNow Certified Implementation Specialist – Risk and Compliance (CIS-RC).
· Required: At least one relevant professional certification appropriate to the candidate’s domain depth, such as CISA, CIA, CRISC, CGEIT, ISO 27001 Lead Implementer/Lead Auditor, ISO 22301 Lead Implementer/Lead Auditor, CBCI/CBCP, PMI-RMP, or equivalent.
· Strongly preferred: Postgraduate qualification in risk, audit, compliance, resilience, information systems, or business administration.
GRC process design and analytical thinking
ServiceNow functional configuration
Workshop facilitation and stakeholder management
Requirements traceability and documentation
Quality, testing, and evidence discipline
Scope, dependency, and risk management
.