Product Owner / Business Analyst (GRC)

Role Overview

Key Responsibilities

• Gather, analyze, and document business requirements for GRC initiatives and platforms.
• Act as Product Owner, managing product backlog, user stories, prioritization, and stakeholder expectations.
• Design and maintain Policy & Control Libraries, ensuring alignment with regulatory and organizational requirements.
• Define and implement Risk & Compliance processes, controls, assessments, and reporting frameworks.
• Manage Attestation & Certification processes, including policy acknowledgements and control attestations.
• Support Audit Management activities, including audit planning, evidence collection, issue tracking, and remediation.
• Collaborate with Risk, Compliance, Internal Audit, Security, and Technology teams.
• Conduct gap assessments and recommend process improvements to strengthen governance and compliance posture.
• Facilitate UAT, stakeholder workshops, and product demonstrations.
• Prepare business requirements, process flows, functional specifications, and regulatory documentation.

Required Skills & Experience

• 5+ years of experience as a Business Analyst, Product Owner, or GRC Consultant.
• Strong domain expertise in Governance, Risk & Compliance (GRC).
• Hands-on experience with Risk & Compliance Management, Policy Management, Control Library Design & Management, Attestation and Certification Processes, Audit Management and Issue Remediation, and Regulatory Compliance Frameworks.
• Experience translating business requirements into functional solutions.
• Strong stakeholder management and communication skills.
• Experience with Agile/Scrum methodologies.

Preferred Qualifications

• Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, MetricStream, or SAP GRC.
• Knowledge of regulatory frameworks such as ISO 27001, NIST, COBIT, SOX, PCI-DSS, and related compliance standards.
• Professional certifications such as CISA, CRISC, CGEIT, CSPO, or CBAP are advantageous.

About Synechron