GRC Systems Business Analyst (KG)

Mediro ICT

Umhlanga Rocks

ZAR 300 000 - 400 000

Job description

Key Responsibilities:
1. Requirements Gathering & Analysis:

Collaborate with business stakeholders (Risk, Compliance, Audit, Legal, IT) to gather and document functional and technical requirements for GRC systems.
Conduct workshops, interviews, and surveys to understand business processes, risk management needs, and compliance objectives.
Analyse and translate business needs into clear system requirements and user stories.

2. GRC System Configuration & Implementation:

Work with technical teams to implement and configure GRC systems (e.g., SAP GRC, RSA Archer, MetricStream, or other GRC solutions).
Ensure that GRC systems are set up to support compliance processes, risk management workflows, and audit management processes.
Assist with system integrations, ensuring seamless data flow between GRC platforms and other enterprise systems (e.g., ERP, Veeva etc.).

3. Process Improvement & Optimisation:

Identify opportunities for process improvements in governance, risk, and compliance areas through GRC system enhancements.
Propose and implement GRC system changes that streamline workflows, improve data integrity, and increase efficiency.
Monitor system performance and recommend adjustments to improve user experience, reporting, and data analysis.

4. Documentation & Training:

Prepare detailed documentation, including functional specifications, user guides, and system configurations.
Conduct user training sessions and create training materials to ensure proper utilisation of GRC systems.
Support end-users by providing guidance on how to use GRC tools for risk management, compliance tracking, and audit processes.

5. Testing & Quality Assurance:

Develop and execute test plans for new GRC system features, configurations, and integrations.
Perform system testing, identify defects, and work with technical teams to resolve issues.
Ensure that GRC solutions comply with internal controls, external regulations, and security requirements.

6. Reporting & Analytics:

Design and implement reports and dashboards to provide visibility into governance, risk, and compliance metrics.
Ensure that GRC systems provide real-time analytics, enabling stakeholders to monitor risks, compliance status, and audit findings.
Assist in the creation of risk assessments, compliance reports, and other documentation required for executive reporting.

7. Support & Maintenance:

Provide ongoing support for the GRC systems, troubleshoot issues, and ensure the systems are operating effectively.
Manage system updates, upgrades, and patches to ensure the GRC tools are up-to-date and in compliance with relevant regulations.
Serve as a liaison between business users and IT for resolving system issues.

Experience:

Bachelor’s degree in Business Administration, Information Systems, Computer Science, or a related field.
3+ years of experience as a Business Analyst with a focus on GRC systems (SAP GRC, RSA Archer, MetricStream, etc.).
Proven experience in requirements gathering, system configuration, and implementation of GRC platforms.
Strong understanding of Governance, Risk, and Compliance processes and frameworks.

Technical Skills:

Experience with GRC solutions (e.g., SAP GRC, RSA Archer, MetricStream).
Strong knowledge of business process modelling, workflows, and documentation.
Familiarity with data integration, reporting tools (e.g., Power BI, Tableau), and database querying (e.g., SQL).
Comfortable with system testing, including creating test cases and executing user acceptance testing (UAT).

Communication Skills:

Strong written and verbal communication skills.
Ability to translate complex technical concepts into business-friendly language.
Experience in preparing training materials and delivering training sessions.

Problem-Solving & Analytical Skills:

Strong analytical and problem-solving abilities.
Ability to identify system inefficiencies and suggest improvements.
Attention to detail and ability to analyse data for risk and compliance reporting.

Desirable:

Certified Business Analysis Professional (CBAP) or Certified Scrum Master (CSM).
Certified in Risk and Information Systems Control (CRISC) or Certified Information Systems Auditor (CISA).
Knowledge of SOX (Sarbanes-Oxley), GDPR, ISO 27001, or other relevant regulatory frameworks.
Familiarity with internal controls and audit methodologies.
Experience working in Agile or Scrum environments for software development and implementation.