GRC Business

GRC Business & Technical Consultant – Onsite – Contract

Join our LinkedIn community:

Role Summary:

We are looking for a GRC Business & Technical Consultant to join our onsite team in Lahore on a contract basis. The consultant will play a pivotal role in evaluating and strengthening a newly built GRC system, ensuring that it aligns with business, compliance, and technical requirements.

This role blends business process understanding, data architecture insight, and solution design expertise. The consultant will evaluate system data flows, review and refine the semantic data model, formalize the solution design document, and conduct comprehensive gap analysis between defined business requirements and the implemented solution.

Key Responsibilities:

·      Evaluate end-to-end data flows within the newly developed GRC system, ensuring accuracy, traceability, and compliance with GRC principles.

·      Review and validate the semantic data model, ensuring data definitions, relationships, and hierarchies support reporting and compliance needs.

·      Conduct detailed gap analysis between business requirements, design specifications, and the current system implementation.

·      Formalize and maintain the Solution Design Document (SDD), capturing architecture, data flow, business rules, and integration logic.

·      Collaborate with development and architecture teams to resolve identified gaps and optimize system design.

·      Translate functional GRC processes (risk, control, audit, compliance) into technical system requirements.

·      Validate system functionality through testing, ensuring compliance with governance and risk management standards.

·      Provide advisory input on best practices in GRC data structure, reporting, and workflow automation.

·      Support and guide the development team through design refinements and implementation tasks.

·      Present findings, risks, and recommendations to project stakeholders through structured reports and walkthroughs.

Specific Deliverables:

·      Documented as-is and to-be data flow diagrams for GRC system processes.

·      Reviewed and approved semantic data model report with recommendations.

·      Completed Gap Analysis Report (Requirement vs. Actual System Implementation).

·      Formalized and version-controlled Solution Design Document (SDD).

·      Functional and technical recommendation summary for GRC enhancements and integrations.

·      Final Validation and Compliance Alignment Report post-review.

Functional Skills:

·      GRC Process Expertise: Strong understanding of risk, compliance, audit, and control frameworks (e.g., COSO, ISO 27001, SOX).

·      Business Requirements Analysis: Ability to interpret business needs and translate them into system design specifications.

·      Gap Analysis & Validation: Skilled in identifying variances between business requirements and technical implementations.

·      Data Governance Understanding: Knowledge of how data supports GRC objectives and compliance reporting.

·      Stakeholder Communication: Ability to present complex system insights in a clear, structured, and actionable way.

Technical Skills:

·      Data Flow & Modeling: Expertise in analyzing system data flows, entity relationships, and semantic data models.

·      System Architecture & Design: Capable of producing high-quality design documentation and architecture diagrams.

·      Integration Understanding: Knowledge of connecting GRC systems with ERP, security, and compliance data sources.

·      Analytical Tools: Familiarity with SQL, data modeling tools (e.g., ER/Studio, PowerDesigner), or BI/reporting platforms.

·      Documentation Proficiency: Skilled in creating FRDs, SDDs, and gap analysis reports using industry-standard templates.

Qualifications & Experience:

·      Bachelor's or Master's degree in Information Systems, Computer Science, or Business Administration.

·      Minimum 5–8 years of experience in GRC system design, implementation, or evaluation projects.

·      Hands-on experience working with SAP GRC, RSA Archer, ServiceNow GRC, or custom-built GRC frameworks.

·      Proven ability to work closely with development teams and business stakeholders.

·      Strong communication, documentation, and analytical skills.