Business Analyst - ITGC Audit & Compliance

System One; India; On-site; INR 900,000 - 1,300,000; Full time

Job summary

System One seeks a Business Analyst – Audit & Compliance Programs to support Quarterly Access Review (QAR) audit activities and remediation initiatives. You will bridge Risk & Compliance, Audit, and Application Owners to define and execute requirements, while tracking KPIs for deliverables.

The role focuses on documenting current and future state processes, developing business requirements, and coordinating with Risk, Audit, and IT teams to ensure controls and audit evidence readiness.

Qualifications

• 4+ years of experience as a Business Analyst in IT, Risk, or Compliance environments.
• Strong experience supporting audits, access reviews, or control remediation efforts.
• Excellent documentation and requirements-gathering skills.
• Ability to translate audit requirements into actionable technical and operational tasks.
• Strong stakeholder management and communication skills.

Responsibilities

• Support QAR audit cycles by gathering, documenting, and validating business and compliance requirements.
• Partner with Risk, Audit, and IT teams to support audit issue remediation initiatives.
• Document current-state and future-state processes related to access reviews, attestations, and controls.
• Develop business requirements, functional specifications, and user stories.
• Optimize Notifications & Communications across tooling and ensure internal compliance to Corporate Comms templates and standards.
• Track remediation commitments, milestones, and evidence requirements.
• Support UAT planning and validation for compliance-related enhancements.
• Assist with audit evidence preparation, response coordination, and clarification requests.
• Support special projects and ad-hoc analysis related to audit findings and control improvements.

Skills

Requirements gathering

Documentation

Stakeholder management

Audit support

Communication

Tools

ServiceNow

Jira

Navex Policy Tech

OnSpring

Job description

Role: Business Analyst – Audit & Compliance Programs

Role Summary:

The Business Analyst will support Quarterly Access Review (QAR) audit activities and special projects related to audit issue remediation. This role acts as a bridge between not only EDST Risk & Compliance, Audit, and Application Owners to ensure requirements are clearly defined, documented, and executed; but also as a conduit within our Risk & Compliance team to help align our Governance, Developers, and Operational Control teams to align on company objectives and track KPIs and metrics that articulate the progress of our deliverables.

Key Responsibilities:

• Support QAR audit cycles by gathering, documenting, and validating business and compliance requirements
• Partner with Risk, Audit, and IT teams to support audit issue remediation initiatives
• Document current-state and future-state processes related to access reviews, attestations, and controls
• Develop business requirements, functional specifications, and user stories
• Optimize Notifications & Communications across tooling and ensure internal compliance to Corporate Comms templates and standards
• Track remediation commitments, milestones, and evidence requirements
• Support UAT planning and validation for compliance-related enhancements
• Assist with audit evidence preparation, response coordination, and clarification requests
• Support special projects and ad-hoc analysis related to audit findings and control improvements

Required Skills & Experience:

• 4+ years of experience as a Business Analyst in IT, Risk, or Compliance environments
• Strong experience supporting audits, access reviews, or control remediation efforts
• Excellent documentation and requirements-gathering skills
• Ability to translate audit requirements into actionable technical and operational tasks
• Strong stakeholder management and communication skills

Preferred Qualifications:

• Experience with SOX, ITGCs, or application access reviews
• Familiarity with ServiceNow, Jira, Navex Policy Tech, OnSpring platforms, and other custom tools, or audit management platforms
• Experience working in regulated or publicly traded environments