Governance, Risk & Compliance Analyst / Specialist (Mid & Senior Levels)

Job Description

Role Overview :

We are seeking skilled professionals to join our Governance, Risk & Compliance (GRC) team at both Analyst / Specialist and Senior Analyst / Specialist levels. The role involves ensuring regulatory compliance, managing organizational risks, and maintaining governance frameworks to protect business integrity and operational resilience.

Requirements

Key Responsibilities :

For All Levels :

Develop, implement, and maintain GRC policies, procedures, and controls.

Monitor compliance with laws, regulations, and internal policies (e.g., GDPR, SOX).

Conduct risk assessments and recommend mitigation strategies.

Prepare compliance and risk reports for management and auditors.

Support internal and external audits and liaise with regulators as needed.

Promote awareness of governance and compliance requirements across the organization.

Additional for Senior Analyst / Specialist :

Lead complex compliance reviews and internal control assessments.

Provide advisory support to business units on governance and risk implications.

Mentor junior staff and contribute to strategic GRC initiatives.

Collaborate with senior management to improve enterprise risk management practices.

Qualifications & Experience :

Education : Bachelor’s degree in Law, Finance, Business Administration, or related field.

Analyst / Specialist : 5–7 years of experience in governance, risk management, or compliance.

Senior Analyst / Specialist : 8–10 years of progressive experience with leadership exposure.

Skills & Competencies :

Knowledge of GRC frameworks (ISO 31000, COSO, etc.) and regulatory requirements.

Strong understanding of risk assessment methodologies and internal controls.

Analytical, problem-solving, and report-writing skills.

Excellent communication and stakeholder engagement abilities.

For Senior Level : Ability to lead projects, influence decisions, and manage escalated compliance issues.

Preferred Certifications :

CISA, CRISC, ISO 31000, ISO 37001, or equivalent GRC-related certifications.