Business Analyst - GRC - US Citizen

SafePaas; Washington (District of Columbia); On-site; USD 85,000 - 120,000; Full time

Job summary

SafePaaS is seeking a Business Analyst with a compliance and IT risk background to bridge business stakeholders, client teams, and technical delivery on GRC implementations.

The role focuses on requirements gathering, data analysis, and dashboard/reporting delivery for clients using SafePaaS to manage SoD violations and regulatory controls, translating risk into system requirements and stakeholder-facing reports.

Qualifications

• Bachelor's degree in business, systems engineering, finance, or related field
• 4+ years as a Business Analyst in compliance, risk, or regulatory settings
• Strong SQL skills with data validation across systems
• Experience with Agile/Scrum (JIRA, Confluence) and writing user stories
• Strong dashboard/reporting skills (Power BI or similar)
• Familiarity with SOX, COSO, ITGC and SoD concepts
• Excellent stakeholder communication across compliance, audit and IT teams

Responsibilities

• Elicit and document business requirements for SoD rules and risk libraries within SafePaaS
• Translate regulatory requirements into functional specs and user stories
• Build dashboards and reports visualizing SoD violations, remediation status, and controls
• Map processes and risk taxonomies to SafePaaS rule sets during onboarding
• Facilitate Agile ceremonies for platform enhancements and client projects
• Prepare audit-ready documentation: functional specs, SOPs, and remediation reports
• Serve as liaison between clients' compliance teams and SafePaaS delivery team
• Stay current on AI governance and regulatory changes; incorporate into requirements

Skills

SQL

Agile/Scrum

Stakeholder communication

Data validation

SOX/COSO/ITGC familiarity

Education

Bachelor's degree in Business, Systems Engineering, Finance, or related field

Tools

JIRA

Confluence

Power BI

Job description

US Citizen Applicants Only

SafePaaS is seeking a Business Analyst with a compliance and IT risk background

to bridge business stakeholders, client teams, and technical delivery on GRC implementations. This role focuses on requirements gathering, data analysis, and dashboard/reporting delivery for clients using SafePaaS to manage SoD violations, access risk, and regulatory controls — rather than deep ERP security configuration itself. It's ideal for someone who understands financial risk, fraud patterns, and regulatory frameworks, and can translate those into system requirements, controls logic, and stakeholder-facing reporting.

Key Responsibilities

• Elicit and document business requirements from client stakeholders (compliance, audit, risk, and IT teams) for SoD rules, access controls, and risk libraries within the SafePaaS platform.
• Translate regulatory requirements into functional specifications and user stories for the SafePaaS product/config team.
• Build dashboards and reports visualizing SoD violations, remediation status, control effectiveness, and audit-readiness metrics for client stakeholders and internal leadership.
• Support client onboarding by mapping business processes and risk taxonomies to SafePaaS rule sets, working alongside technical configuration teams.
• Facilitate Agile ceremonies for platform enhancement and client implementation projects, managing requirements in JIRA/Confluence.
• Prepare audit-ready documentation: functional specs, SOPs, control narratives, and remediation reports.
• Serve as a liaison between clients' compliance/audit teams and SafePaaS's technical delivery team, ensuring requirements are accurately captured and delivered.
• Stay current on emerging risk areas — including AI/non-human identity (NHI) governance and evolving regulatory frameworks — and help incorporate them into requirements.

Required Qualifications

• Bachelor's degree in Business, Systems Engineering, Finance, or related field.
• 4+ years of Business Analyst experience, ideally within financial compliance, fraud/risk, or regulatory environments.
• Strong SQL skills and experience validating/reconciling data across multiple systems.
• Experience with Agile/Scrum delivery (JIRA, Confluence) and writing user stories/functional specs.
• Strong dashboard/reporting skills (Power BI or equivalent BI tools).
• Understanding of internal controls frameworks (SOX, COSO, ITGC) and segregation of duties concepts.
• Excellent stakeholder communication skills, with experience working across compliance, audit, and technical teams.

Preferred Qualifications

• Familiarity with ERP security/access governance concepts (Oracle GRC/AACG/CCG/PCG, SAP GRC, or similar platforms) — hands-on config experience not required but a plus.
• Experience supporting regulatory/government clients (SEC, FHFA, financial institutions).
• US Federal Agency Security Clearance