GRC System Analyst

GENERAL SUMMARY

The GRC System Analyst will be responsible for maintaining robust GRC software solutions and reporting capabilities that assists the Bank in managing their regulatory and compliance requirements effectively.
The role will evolve to become a blend of reporting requirements gathering, configuration, report writing and design for the Bank’s business and risk management professionals across the three lines of defense. Typical stakeholders may include Risk Management, Audit, Compliance, Enterprise Risk Management, Model Management, Information Technology, Information Security, Project Management, Third-Party Risk, Physical Security, and others yet to be determined.

ESSENTIAL FUNCTIONS

• Assist in the maintenance and reporting of the Bank’s risks and controls through GRC solutions, Diligent and ServiceNow.
• Identify and implement opportunities to routinize/automate key GRC processes with the goal of reducing the level of effort and shortening delivery time.
• Understand the process flows of the Bank’s transaction lifecycles across multiple business segments.
• Facilitate ongoing triggers, escalation, and mitigating actions of the relevant control vulnerabilities and risk profile changes.
• Prepare and present comprehensive risk profile reports to senior management, highlighting key risk themes, trends, and strategic recommendations.
• Develop training materials and conduct training sessions to educate staff on GRC workflows and system behavior.

QUALIFICATIONS

Education:

• Bachelor's degree in business or MIS (preferred) or related field. 

Experience:

• 2-4 years of experience in operational risk management.
• 2-4 years of experience with Diligent One (formerly known as HighBond) and/or ServiceNow GRC tools, capabilities, and reporting features.
• FFIEC regulatory knowledge and time spent implementing upon dictated guidance requirements.

Skills/Ability:

• Self-motivated with an analytical mindset and a drive to learn new technologies.
• Technical support and development of continuous documentation for GRC end users.
• Observance of best practices for system design and conformance to system frameworks established within the GRC tool.
• Maintaining user permissions, additions, and removals within the GRC systems.
• Proficiency in data analysis and GRC risk reporting.
• Creating and maintaining excellent executive-level dashboards.
• Knowledge of GRC frameworks and standards (e.g., COBIT, ISO 27001).
• Familiarity with compliance regulations (e.g., GDPR, SOX, HIPAA).
• Exceptional analytical skills with the ability to synthesize complex data and provide strategic insights.
• Excellent communication and presentation skills, to a) interact confidently with senior leadership and b) convey complex concepts to diverse audiences.
• Ability to work with REST APIs.
• Familiarity with Amazon Quicksight, Shiny, and PowerBI for data visualization and reporting.
• Proficiency in Microsoft Office suite – Word, Excel (VBA and formulas in Excel), Outlook, SharePoint, Teams.
• Knowledge in SQL to be used with SQLite.

OTHER DETAILS

$100,000 – $122,800 / year 
Pay determined based on job-related knowledge, skills, experience, and location.