Director of Governance, Risk, and Compliance

Responsibilities

• Design and implement the enterprise governance framework, including policies, approval authorities, and decision-making protocols
• Build and own the Enterprise Risk Management (ERM) framework from scratch, including the enterprise risk register
• Establish and manage the compliance framework across all current and future international operating markets
• Design practical internal controls across finance, procurement, vendor management, and data protection
• Oversee data privacy and protection compliance, specifically regarding PDPL and GDPR
• Partner with Product and Engineering to ensure platform features meet regulatory requirements
• Prepare board-level reporting on key risks, compliance posture, and governance health
• Build and lead the GRC team from the ground up as the business scales

Requirements

• 10+ years of experience in governance, risk, compliance, or a related field
• Demonstrated experience building or significantly scaling a GRC function
• Strong knowledge of regulatory frameworks relevant to tech platforms, marketplaces, or e-commerce
• Familiarity with data privacy regulations, including PDPL and GDPR
• Experience operating across multiple markets, ideally within the MENA region
• Excellent stakeholder management and executive communication skills
• Ability to operate as a hands-on individual contributor in a high-growth environment

Preferred Qualifications

• Relevant professional certifications such as CISA, CRISC, CISM, or ICA

About the Company

webook.com is Saudi’s #1 event ticketing and experience booking platform, serving some of the largest mega events in the Kingdom with over 2 billion in sales.