Business Analyst - ITGC Audit & Compliance

Business Analyst (BA) – QAR Initiative

Role: Business Analyst – Audit & Compliance Programs

Role Summary:

The Business Analyst will support Quarterly Access Review (QAR) audit activities and special projects related to audit issue remediation. This role acts as a bridge between not only EDST Risk & Compliance, Audit, and Application Owners to ensure requirements are clearly defined, documented, and executed; but also as a conduit within our Risk & Compliance team to help align our Governance, Developers, and Operational Control teams to align on company objectives and track KPIs and metrics that articulate the progress of our deliverables.

Key Responsibilities:

• Support QAR audit cycles by gathering, documenting, and validating business and compliance requirements
• Partner with Risk, Audit, and IT teams to support audit issue remediation initiatives
• Document current‑state and future‑state processes related to access reviews, attestations, and controls
• Develop business requirements, functional specifications, and user stories
• Optimize Notifications & Communications across tooling and ensure internal compliance to Corporate Comms templates and standards
• Track remediation commitments, milestones, and evidence requirements
• Support UAT planning and validation for compliance‑related enhancements
• Assist with audit evidence preparation, response coordination, and clarification requests
• Support special projects and ad‑hoc analysis related to audit findings and control improvements

Required Skills & Experience:

• 4+ years of experience as a Business Analyst in IT, Risk, or Compliance environments
• Strong experience supporting audits, access reviews, or control remediation efforts
• Excellent documentation and requirements‑gathering skills
• Ability to translate audit requirements into actionable technical and operational tasks
• Strong stakeholder management and communication skills

Preferred Qualifications:

• Experience with SOX, ITGCs, or application access reviews
• Familiarity with ServiceNow, Jira, Navex Policy Tech, OnSpring platforms, and other custom tools, or audit management platforms
• Experience working in regulated or publicly traded environments