Support continuous improvement of GRC programs and ensure alignment with ERM strategy.
Contribute to the development and maintenance of standardized GRC methodologies, templates, and documentation.
Identify opportunities to streamline or automate risk and control activities.
Support the risk self‑identification process and annual RCSA program through data collection and preparation.
Partner with first‑line teams to document risks, controls, and issues accurately.
Contribute to policy and procedure updates to ensure accuracy and regulatory alignment.
Analyze lessons learned from issues, audits, and events to strengthen GRC practices.
Oversee the issue‑management lifecycle for risk, audit and compliance findings, ensuring strong root‑cause analysis, effective corrective actions, and timely remediation.
Translate incidents, losses, and near‑misses into actionable control enhancements.
Monitor KRIs and control metrics, providing insights into residual risk and emerging trends.
Develop executive and board‑level reporting on GRC maturity, RCSA results, issue trends, and overall risk posture.
Support enterprise risk committees and governance forums with data‑driven insights and recommendations.
Serve as second‑line lead for regulatory exams/audits and maintain exam‑ready documentation.
Maintain exam‑ready documentation and ensure alignment with supervisory expectations (e.g., NCUA, OCC, Federal Reserve).

Bachelor’s degree in business, finance, risk management, or a related field; advanced degree or relevant certifications (e.g., CRMA, CISA, or similar) preferred.
Minimum of 3-5 years’ experience in governance, risk, and compliance (GRC) or enterprise risk management roles.
Strong analytical skills with demonstrated ability to interpret data, identify trends, and support process improvement initiatives.
Experience with risk and control self-assessment (RCSA), policy governance, and issue management processes.
Excellent written and verbal communication skills, with the ability to collaborate effectively across business units.
Ability to manage multiple priorities, adapt to changing requirements, and work independently or as part of a team.
Experience in a regulated industry such as financial services is highly desirable.
Familiarity with advanced data analytics or automation tools to support GRC initiatives is a plus.
Demonstrated success in leading cross-functional projects or process improvement efforts, as well as strong project management skills, is preferred.
Proficiency in GRC software tools and Microsoft Office Suite.

Senior GRC Analyst

Key skills