Skip to content

GRC

Business Analyst - GRC - US Citizen

SafePaaS logoSafePaaSRemote in United StatesFull-timePosted 2mo ago
Apply on SafePaaS (shows the role here)SafePaaS as an employer: salaries and roles

The full posting

US Citizen Applicants Only

SafePaaS is seeking a Business Analyst with a compliance and IT risk background to bridge business stakeholders, client teams, and technical delivery on GRC implementations. This role focuses on requirements gathering, data analysis, and dashboard/reporting delivery for clients using SafePaaS to manage SoD violations, access risk, and regulatory controls - rather than deep ERP security configuration itself. It's ideal for someone who understands financial risk, fraud patterns, and regulatory frameworks, and can translate those into system requirements, controls logic, and stakeholder-facing reporting.

Key Responsibilities

  • Elicit and document business requirements from client stakeholders (compliance, audit, risk, and IT teams) for SoD rules, access controls, and risk libraries within the SafePaaS platform.
  • Translate regulatory requirements into functional specifications and user stories for the SafePaaS product/config team.
  • Build dashboards and reports visualizing SoD violations, remediation status, control effectiveness, and audit-readiness metrics for client stakeholders and internal leadership.
  • Support client onboarding by mapping business processes and risk taxonomies to SafePaaS rule sets, working alongside technical configuration teams.
  • Facilitate Agile ceremonies for platform enhancement and client implementation projects, managing requirements in JIRA/Confluence.
  • Prepare audit-ready documentation: functional specs, SOPs, control narratives, and remediation reports.
  • Serve as a liaison between clients' compliance/audit teams and SafePaaS's technical delivery team, ensuring requirements are accurately captured and delivered.
  • Stay current on emerging risk areas - including AI/non-human identity (NHI) governance and evolving regulatory frameworks - and help incorporate them into requirements.

-

Required Qualifications

  • Bachelor's degree in Business, Systems Engineering, Finance, or related field.
  • 4+ years of Business Analyst experience, ideally within financial compliance, fraud/risk, or regulatory environments.
  • Strong SQL skills and experience validating/reconciling data across multiple systems.
  • Experience with Agile/Scrum delivery (JIRA, Confluence) and writing user stories/functional specs.
  • Strong dashboard/reporting skills (Power BI or equivalent BI tools).
  • Understanding of internal controls frameworks (SOX, COSO, ITGC) and segregation of duties concepts.
  • Excellent stakeholder communication skills, with experience working across compliance, audit, and technical teams.

-

Preferred Qualifications

  • Familiarity with ERP security/access governance concepts (Oracle GRC/AACG/CCG/PCG, SAP GRC, or similar platforms) - hands-on config experience not required but a plus.
  • Experience supporting regulatory/government clients (SEC, FHFA, financial institutions).
  • US Federal Agency Security Clearance

Where you can be based

This position is 100% remote and open to applicants based in United States.

Text as SafePaaS published it; last compared with the original on 13 Nov 2026.

Apply on SafePaaS (shows the role here)

The employer: SafePaaS

SafePaaS sells software that governs access and risk in Oracle and other ERP systems, and is hiring for four remote GRC and security consulting roles.

Pay and benefits: Full-time, client-facing consulting on platform implementations; the analyst post requires US citizenship.

Full postings from SafePaaS All SafePaaS openings on the board SafePaaS employer profile

Other security roles worth a look

A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when SafePaaS posts a security role

We read SafePaaS's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.