Governance, Risk & Compliance Analyst

Job Purpose

Support the implementation and continuous enhancement of the organization's Governance, Risk & Compliance framework, with a focus on enterprise risk management, operational risk, governance, risk assessments, control oversight, compliance monitoring and management reporting.

The role partners with business and senior stakeholders to strengthen risk visibility, improve control environments, support effective governance and ensure risk management practices are consistently embedded across the organisation.

Roles & Responsibilities

Governance & Risk Management

• Support the implementation and enhancement of the Risk Management framework across business units.
• Maintain and enhance risk governance processes, frameworks and reporting mechanisms.
• Provide second-line risk oversight and challenge to ensure risks and controls are appropriately identified, assessed and managed.
• Support the identification, assessment and monitoring of operational and emerging risks.
• Promote consistent application of risk management standards across the organisation.

Risk & Control Assessment

• Coordinate and facilitate Risk & Control Self-Assessment (RCSA) exercises with business stakeholders.
• Review risk assessments, control design and control effectiveness, providing appropriate challenge where required.
• Track identified risk issues, incidents and remediation actions through to resolution.
• Monitor risk trends and emerging exposures through established risk indicators.

Compliance & Governance Monitoring

• Coordinate enterprise-wide attestation exercises and monitor completion against established requirements.
• Support compliance with internal policies, risk frameworks and governance requirements.
• Maintain appropriate governance documentation, risk records and supporting evidence.
• Support management responses and remediation activities arising from risk and control reviews.

Risk Reporting & Analytics

• Develop, monitor and analyse Key Risk Indicators (KRIs) to provide management with timely visibility of risk exposures.
• Prepare regular risk dashboards, management reports and Board/Risk Committee reporting packs.
• Analyse risk data to identify trends, control weaknesses and areas requiring management attention.
• Drive improvements in risk reporting efficiency, data quality and accuracy.
• Utilise tools such as Power BI, JIRA and IBM OpenPages to support GRC activities and risk reporting.

Stakeholder Management & Risk Culture

• Partner with senior stakeholders and business units to strengthen risk ownership and governance.
• Work collaboratively with cross-functional teams to resolve risk and control issues.
• Provide guidance and support to stakeholders on operational risk and GRC requirements.
• Deliver risk awareness and training sessions to strengthen the organisation's risk culture.

Key Performance Indicators

• Effectiveness and maturity of GRC and ERM framework implementation.
• Timely and quality completion of RCSA and attestation exercises.
• Quality and relevance of KRI and risk reporting.
• Timeliness of risk issue and remediation closure.
• Accuracy and integrity of risk data and management reporting.
• Stakeholder engagement and adoption of risk management practices.
• Effectiveness of risk governance and second-line challenge.
• Ensure compliance with security standards, enterprise governance, and industry best practices.

Qualification

• Degree or equivalent qualification in Business, Risk Management, Information Technology or a related discipline.

Requirements

• Experience in GRC, Enterprise Risk Management, Operational Risk or Risk Governance.
• Practical experience with RCSA, KRIs, risk reporting and governance processes.
• Experience engaging business and senior stakeholders.
• Strong analytical and reporting capabilities.
• Experience with GRC/risk technology platforms and data visualisation tools.