GRC Business Analyst — Compliance & Risk Reporting

SafePaas; Washington (District of Columbia); On-site; USD 85,000 - 120,000; Full time

Job summary

SafePaaS is seeking a Business Analyst with a compliance and IT risk background to bridge business stakeholders, client teams, and technical delivery on GRC implementations.

The role focuses on requirements gathering, data analysis, and dashboard/reporting delivery for clients using SafePaaS to manage SoD violations and regulatory controls, translating risk into system requirements and stakeholder-facing reports.

Qualifications

• Bachelor's degree in business, systems engineering, finance, or related field
• 4+ years as a Business Analyst in compliance, risk, or regulatory settings
• Strong SQL skills with data validation across systems
• Experience with Agile/Scrum (JIRA, Confluence) and writing user stories
• Strong dashboard/reporting skills (Power BI or similar)
• Familiarity with SOX, COSO, ITGC and SoD concepts
• Excellent stakeholder communication across compliance, audit and IT teams

Responsibilities

• Elicit and document business requirements for SoD rules and risk libraries within SafePaaS
• Translate regulatory requirements into functional specs and user stories
• Build dashboards and reports visualizing SoD violations, remediation status, and controls
• Map processes and risk taxonomies to SafePaaS rule sets during onboarding
• Facilitate Agile ceremonies for platform enhancements and client projects
• Prepare audit-ready documentation: functional specs, SOPs, and remediation reports
• Serve as liaison between clients' compliance teams and SafePaaS delivery team
• Stay current on AI governance and regulatory changes; incorporate into requirements

Skills

SQL

Agile/Scrum

Stakeholder communication

Data validation

SOX/COSO/ITGC familiarity

Education

Bachelor's degree in Business, Systems Engineering, Finance, or related field

Tools

JIRA

Confluence

Power BI

Job description

SafePaaS is seeking a Business Analyst with a compliance and IT risk background to bridge business stakeholders, client teams, and technical delivery on GRC implementations.

The role focuses on requirements gathering, data analysis, and dashboard/reporting delivery for clients using SafePaaS to manage SoD violations and regulatory controls, translating risk into system requirements and stakeholder-facing reports.