Product Owner / Business Analyst (GRC)

Greetings,Synechron is currently hiring for an immediate opportunity for the position of Product Owner / Business Analyst (GRC) in Riyadh, KSA.Role: Product Owner / Business Analyst (GRC) Location: Riyadh, KSA Experience: 5+ YearsAbout Company:Synechron is a global technology consulting firm that helps leading organizations accelerate digital transformation through innovation, expertise, and agility. With more than 16,700 professionals across around 60 offices in over 22 countries, we combine deep industry knowledge with advanced capabilities in AI, cloud, cybersecurity, and data engineering.Our regional teams, supported by strategic delivery centers, provide scalable, cost-efficient solutions tailored to local markets. Through our award-winning Synechron FinLabs accelerators and strategic partnerships with AWS, Microsoft, Databricks, Salesforce, and ServiceNow, we enable clients to innovate fast and lead with confidence. For more information on the company, please visit our website or LinkedIn community.Synechron: Technology and AI Consulting for BusinessSynechron is an innovative global consulting firm delivering industry-leading digital solutions to transform and empower businesses.Diversity, Equity, and InclusionSynechron’s Diversity, Equity, and Inclusion (DEI) program, Same Difference, was developed because we believe in a culture of listening, respect, and opportunity.We each bring unique backgrounds, thoughts, talents, and experiences with us to work every day, and we know that by embracing them, we are creating an even greater Synechron. The best way to build a strong team is to value individual differences. So, it doesn’t matter where you’re from or what you’ve had to do to get here – if you have the skills, enthusiasm, and drive to make your mark, we’ll support you like we support each other. Choose a career with us and let’s pursue innovation, together.Job Descriptions:Role Overview:We are seeking an experienced Product Owner / Business Analyst (GRC) with strong expertise in Risk & Compliance, policy and control framework design, attestation processes, and audit management. The ideal candidate will bridge business and technology teams to deliver enterprise GRC solutions that enhance regulatory compliance, risk visibility, and governance effectiveness.

Key Responsibilities

Gather, analyze, and document business requirements for GRC initiatives and platforms.Act as Product Owner, managing product backlog, user stories, prioritization, and stakeholder expectations.Design and maintain Policy & Control Libraries, ensuring alignment with regulatory and organizational requirements.Define and implement Risk & Compliance processes, controls, assessments, and reporting frameworks.Manage Attestation & Certification processes, including policy acknowledgements and control attestations.Support Audit Management activities, including audit planning, evidence collection, issue tracking, and remediation.Collaborate with Risk, Compliance, Internal Audit, Security, and Technology teams.Conduct gap assessments and recommend process improvements to strengthen governance and compliance posture.Facilitate UAT, stakeholder workshops, and product demonstrations.Prepare business requirements, process flows, functional specifications, and regulatory documentation.Required Skills & Experience:5+ years of experience as a Business Analyst, Product Owner, or GRC Consultant.Strong domain expertise in Governance, Risk & Compliance (GRC).Hands-on experience with: Risk & Compliance ManagementPolicy ManagementControl Library Design & ManagementAttestation and Certification ProcessesAudit Management and Issue RemediationRegulatory Compliance FrameworksExperience translating business requirements into functional solutions.Strong stakeholder management and communication skills.Experience with Agile/Scrum methodologies.

Preferred Qualifications

Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, MetricStream, or SAP GRC.Knowledge of regulatory frameworks such as ISO 27001, NIST, COBIT, SOX, PCI-DSS, and related compliance standards.Professional certifications such as CISA, CRISC, CGEIT, CSPO, or CBAP are advantageous.