General Manager — Governance, Risk & Compliance

Overview

The General Manager for Governance, Risk & Compliance (GRC) at Petromin Corporation will design, implement, and oversee integrated frameworks that encompass governance, enterprise risk management, and compliance. This role is pivotal in identifying, evaluating, and managing key organizational risks while ensuring adherence to relevant laws, regulatory obligations, and governance standards including corporate governance requirements like CMA and listing readiness preparations.

Key Responsibilities

• Develop and maintain corporate governance frameworks including governance manuals, Delegations of Authority, Codes of Conduct, and committee charters in line with applicable corporate governance standards and company law.
• Manage the Enterprise Risk Management (ERM) program based on ISO 31000 and COSO standards; define risk appetite, maintain risk registers, establish key risk indicators, and facilitate risk assessments and reporting for executive leadership and Board Risk Committee.
• Lead the compliance program by managing regulatory requirements and compliance universe, monitoring changes in regulation, conducting compliance testing, and overseeing the whistleblowing channel.
• Own the internal control framework implementation, promote control self-assessments, and coordinate remediation efforts.
• Govern policy lifecycle management—creation, approval, publication, and periodic revisions—and maintain a centralized policy repository.
• Drive governance, risk, and compliance initiatives related to IPO readiness and ongoing disclosure obligations where relevant.
• Ensure organizational compliance with Saudi’s Personal Data Protection Law (PDPL) and data governance mandates.
• Promote a culture of ethics and risk awareness through tailored training and awareness campaigns across the company.
• Oversee business continuity and crisis management frameworks as required.
• Prepare and present consolidated GRC reports and dashboards for senior management and Board committees.
• Lead and develop the GRC team in governance, risk, and compliance areas.
• Implement and enhance GRC technology platforms to integrate risk, control, and compliance data efficiently.

Performance Indicators

• Maintain residual risks within approved appetite limits.
• Minimize occurrence and severity of compliance breaches and regulatory issues.
• Ensure high currency of policies within scheduled review cycles.
• Demonstrate effectiveness of controls through second-line testing and self-assessments.
• Achieve compliance and governance milestones, including listing readiness when applicable.
• Ensure accuracy and timeliness in regulatory reporting and submissions.

Qualifications and Experience

• Bachelor's degree in Law, Finance, Business, or a related field.
• Minimum of 10 years’ experience in governance, risk, or compliance roles; experience with listed companies or IPO processes is a strong advantage.
• Proven expertise in developing and leading ERM, compliance, and governance frameworks at a corporate group level.
• Strong familiarity with relevant regulations such as CMA, Companies Law, PDPL, and ERM frameworks like COSO and ISO 31000.

Professional Certifications

• Preferred certifications include CRMA, CRISC, CGEIT, GRCP, CCEP, CFE, or ISO 31000 Lead Practitioner.

Core Competencies

• High integrity and a broad enterprise risk mindset.
• Deep understanding of regulatory requirements and governance principles.
• Influential leadership style capable of driving change without direct authority.
• Strategic thinker balanced with practical execution focus.
• Excellent stakeholder management skills engaging first-line roles, executives, and Board members.