Governance, Risk & Compliance Analyst/Specialist (Mid & Senior Levels)

Role Overview:

We are seeking skilled professionals to join our Governance, Risk & Compliance (GRC) team at both Analyst / Specialist and Senior Analyst / Specialist levels. The role involves ensuring regulatory compliance, managing organizational risks, and maintaining governance frameworks to protect business integrity and operational resilience.

Requirements

Key Responsibilities:

For All Levels:

• Develop, implement, and maintain GRC policies, procedures, and controls.
  

• Monitor compliance with laws, regulations, and internal policies (e.g., GDPR, SOX).
  

• Conduct risk assessments and recommend mitigation strategies.
  

• Prepare compliance and risk reports for management and auditors.
  

• Support internal and external audits and liaise with regulators as needed.
  

• Promote awareness of governance and compliance requirements across the organization.
  

Additional for Senior Analyst / Specialist:

• Lead complex compliance reviews and internal control assessments.
  

• Provide advisory support to business units on governance and risk implications.
  

• Mentor junior staff and contribute to strategic GRC initiatives.
  

• Collaborate with senior management to improve enterprise risk management practices.
  

Qualifications & Experience:

• Education: Bachelor’s degree in Law, Finance, Business Administration, or related field.
  

• Analyst / Specialist: 5–7 years of experience in governance, risk management, or compliance.
  

• Senior Analyst / Specialist: 8–10 years of progressive experience with leadership exposure.
  

Skills & Competencies:

• Knowledge of GRC frameworks (ISO 31000, COSO, etc.) and regulatory requirements.
  

• Strong understanding of risk assessment methodologies and internal controls.
  

• Analytical, problem-solving, and report-writing skills.
  

• Excellent communication and stakeholder engagement abilities.
  

• For Senior Level: Ability to lead projects, influence decisions, and manage escalated compliance issues.
  

Preferred Certifications:

• CISA, CRISC, ISO 31000, ISO 37001, or equivalent GRC-related certifications.