Business Analyst ITGRC

Referring to the details requirement below, I would like to emphasize that Client specifically seeking Business Analyst candidates with substantial experience in IT Governance, Risk, and Compliance (ITGRC) projects.

While client value general Business Analyst expertise, Their current needs require candidates who have direct hands-on experience supporting IT governance initiatives, policy management, regulatory gap analysis, audit handling and risk assessment within the context of ITGRC.

This level of specialization is essential for the role, as the candidate will be expected to contribute to complex governance and compliance frameworks.

Please ensure that the candidates align with these requirements.

We kindly ask you to prioritize candidates with proven track records in ITGRC projects rather than those with only standard BA backgrounds.

Job Summary

Business Analyst with strong exposure in ITGRC to support IT governance, policy management and target operating model (TOM) initiatives.

Qualifications

• Education
  • Bachelor’s degree in IT, Information Systems, or related field
  • Experience in banking/financial industry preferred
  • Good communication skill in English (written and spoken), required for coordination with local and regional teams

• Experience
  • 5 - 10+ years of experience
  • Proven experience in:
    • IT Governance, Risk & Compliance (ITGRC)
    • Regulatory gap analysis (preferably OJK / BI or financial industry)
    • Audit handling and remediation tracking
    • IT policy, governance framework, or IT control design
  • Strong exposure to stakeholder coordination across multiple IT domains (planning, development, operation, risk)
  • Experience interacting with:
    • Senior management or management-level stakeholders
    • Audit / Compliance / Risk functions

• Key Responsibilities
• Perform IT risk assessment, maintain risk register, and track remediation progress
• Conduct regulatory gap analysis and ensure alignment with applicable requirements
• Support audit activities, including audit response and evidence preparation
• Support IT policy review, enhancement, and alignment across regulatory and internal requirements
• Assist in maintaining policy hierarchy (policy, standard, procedure) and ensuring consistency with operational practices
• Assess the impact of target operating model (TOM) changes to IT operations
• Identify gaps between current and future operating models
• Support preparation of governance and decision-making materials for management
• Coordinate with stakeholders across IT, risk, and business units to ensure governance alignment
• Facilitate discussions and prepare structured materials for management review

• Hard skills
  • Strong understanding of IT governance, risk management, and compliance frameworks (e.g., COBIT, ISO 27001, CISA)
  • Experience in regulatory compliance and risk assessment
  • Understanding of IT policy structure (policy, standard, procedure)
  • Ability to analyze operating model changes and governance impact across multiple stakeholders
  • Familiarity with multi-stakeholder governance environment and cross-functional coordination
  • Experience in governance or transformation initiatives is an advantage

• Soft Skills
  • Strong analytical thinking and problem-solving capability
  • Ability to provide structured, risk-based analysis and recommendations
  • Good communication and stakeholder coordination skills
  • Ability to work effectively in dynamic and evolving environments
  • Detail-oriented with strong documentation capability
  • Able to manage multiple priorities and deadlines