Business Analyst with GRC - Boston, MA (Day 1 Onsite)

1 view
Skip to first unread message

Maneesh Sanghi

unread,
May 7, 2025, 10:22:00 AM5/7/25
to

Hi Professional,

 

I am writing to let you know regarding a job opportunity as Business Analyst with GRC (Governance, Risk, and Compliance)”. Mentioned is the job description for your review.

 

Job Title: Business Analyst with GRC (Governance, Risk, and Compliance)

Location: Boston, MA (Day 1 Onsite)

Job Type: Contract

 

Summary:

         We are seeking a detail-oriented and proactive Business Analyst with strong experience in Governance, Risk, and Compliance (GRC) to join our dynamic team.

         The ideal candidate will serve as a key liaison between business stakeholders, risk/compliance teams, and technology partners, helping to analyze, implement, and enhance GRC processes, frameworks, and systems.

         This role requires a solid understanding of OneTrust, Consent Management, regulatory requirements, risk management principles, and GRC platforms such as RSA Archer, ServiceNow GRC, or MetricStream.

 

Qualifications:

         Strong understanding of GRC concepts, risk frameworks (e.g., COSO, NIST, ISO 27001), and compliance regulations (e.g., SOX, GDPR, HIPAA).

         Experience with one or more GRC platforms (e.g., RSA Archer, ServiceNow GRC, MetricStream).

         Experience with implementation of Consent Management platform such as OneTrust and related integrations

         Proficient in business analysis tools (e.g., JIRA, Confluence, MS Visio, Excel).

         Excellent written and verbal communication skills.

         Experience working in regulated industries (e.g., financial services, healthcare, life sciences) is a plus.

         Professional certifications such as CISA, CRISC, CGEIT, or CBAP are a plus.

 

Preferred Skills:

         Familiarity with audit processes and third-party risk management.

         Understanding of data privacy and cybersecurity risks and protocols.

         Proficiency with OneTrust or similar Consent management application.

         Agile and Waterfall project delivery experience.

 

Key Responsibilities:

         Gather, document, and analyze business requirements for GRC-related initiatives

         Collaborate with compliance, internal audit, and IT security teams to understand risk and regulatory obligations.

         Assist in the design, implementation, and optimization of GRC platforms and workflows.

         Support the development of risk control matrices, compliance checklists, and audit trails.

         Facilitate stakeholder workshops to align Consent management and risk management processes with business objectives.

         Analyze current-state processes and recommend improvements to enhance compliance efficiency and effectiveness.

         Ensure traceability of requirements throughout the lifecycle of GRC projects.

         Generate reports and dashboards to provide insights into risk posture and compliance status.

         Participate in system testing, user acceptance testing (UAT), and documentation of test results.

         Act as a bridge between technical teams and risk/compliance users to ensure successful delivery.

 

"Centraprise is an equal opportunity employer. Applicants must be authorized to work in the U.S. U.S. citizens and Green Card holders are strongly encouraged to apply."

 

Thanks & Regards

Maneesh Sanghi| US IT Recruiter

Centraprise Corp

Desk/Direct: 848-271-1949 Ext – 1039

33 Wood Avenue South, Suite 600, Iselin NJ - 08830

Man...@centraprise.com

cid:image001.png@01D5AFD5.623C46F0

 

We respect your online privacy. If you would like to be removed from our mailing list, please reply with "Remove" in the subject and we will comply immediately. We apologize for any inconvenience caused. Please let us know if you have more than one domain. The material in this e-mail is intended only for the use of the individual to whom it is addressed and may contain information that is confidential, privileged, and exempt from disclosure under applicable law. If you are not the intended recipient, be advised that the unauthorized use, disclosure, copying, distribution, or the taking of any action in reliance on this information is strictly prohibited. We are an equal opportunity employer with a diverse workforce.

 

Reply all
Reply to author
Forward
0 new messages