Position Summary The Senior GRC Analyst serves as the platform owner and lead technical resource for the Enterprise Compliance and Risk function. This role is responsible for platform administration, complex reporting and analytics, and the migration of the enterprise GRC environment onto a single consolidated platform. The function's audit, risk, policy, and third-party work is executed on this platform, which makes this role the technical spine of the department.
A central objective of the role is rationalizing the compliance technology estate. Several capabilities are operated today with support from outside consultants, and this role brings that administration in-house while ensuring the function is not running a system that duplicates a product already licensed elsewhere in the enterprise. The ideal candidate has hands-on GRC platform administration experience, strong analytical and reporting capability, and the judgment to consolidate rather than accumulate tooling.
Key Responsibilities
- Platform Migration and Administration
- Own the enterprise GRC platform migration end to end, including planning, control mapping, configuration, parallel run, cutover, and legacy platform retirement
- Serve as primary platform administrator, managing user access, roles, workflows, configurations, and system integrations
- Bring platform administration in-house, reducing dependency on external consultants for routine operation and configuration
- Phase module delivery beginning with audit management, then policy and attestation, risk register, and findings
- Develop and maintain platform documentation, training materials, and standard operating procedures for business users
- Reporting and Analytics
- Design and maintain dashboards, reports, and analytics supporting governance forums, executive leadership, and business unit stakeholders
- Build and maintain key risk indicator reporting as the enterprise indicator program is established
- Generate risk reports, findings summaries, and trend analyses to support governance and committee preparation
- Integrate vulnerability management reporting, HRIS data, and other enterprise sources into the platform
- Enablement and Continuous Improvement
- Partner with capability owners across audit and assurance, risk, privacy, policy, and third-party risk to ensure their work is supported on the platform
- Support control testing and readiness activity on the shared platform in coordination with Finance and Internal Audit
- Identify opportunities for process automation and efficiency improvement within the platform, including AI-assisted workflows
- Collaborate with IT, Cybersecurity, and external vendors on system enhancements, integrations, and troubleshooting
- Evaluate proposed compliance tooling against the existing enterprise estate to avoid redundant or duplicative purchases
Required Qualifications - Bachelor's degree in Information Systems, Business, Risk Management, Computer Science, or a related field
- 3 to 6 years of experience in GRC, risk management, compliance, or IT audit
- 2 or more years of hands-on experience administering an enterprise GRC platform (Workiva, Onspring, Archer, ServiceNow, or similar)
- Demonstrated experience with control mapping, workflow configuration, and platform integrations
- Experience supporting a platform migration, implementation, or major module rollout
- Demonstrated ability to build reporting and analytics for executive and governance audiences
- Skills
- Strong analytical skills with the ability to create complex reports and translate data into actionable insight
- Proficiency in Microsoft Excel, including pivot tables, lookups, and data visualization
- Excellent written and verbal communication, including the ability to explain technical concepts to business users
- Ability to manage multiple priorities and meet deadlines in a fast-paced environment
- Structured approach to documentation, configuration control, and change management
- Collaborative working style across compliance, technology, and business unit stakeholders
- Preferred Qualifications
- Workiva certification, or certification in a comparable enterprise GRC platform
- Professional certifications such as CISA, CRISC, CGRC, or similar
- Experience in insurance, financial services, or other regulated industries
- Experience with SQL or other query languages for data extraction and analysis
- Familiarity with SOC 2, HITRUST, NIST, or ISO 27001 frameworks
- Project management experience or certification such as PMP or CAPM
