01Overview
Role: Business Analyst Audit & Compliance Programs (Access Reviews)
Duration: Contract
Location: Remote
Job Opportunity:
Overview Were hiring a Business Analyst to help lead a high-visibility audit and access review program supporting 40 enterprise and custom applications. This person will be the day-to-day bridge between Risk/Compliance, Audit, and the Application Engineering/SME group; driving requirements, process clarity, and delivery execution.
A big focus of the team is moving toward more automated, repeatable auditing, so youll be central to defining the future-state process and helping the engineering team operationalize it. Strong communication is critical as this role also acts as a leader for the application SMEs, helping train, align, and standardize how work gets done.
What Youll Do
- Lead and coordinate Quarterly Access Review (QAR) cycles and related audit activities across ~40 applications
- Translate audit/compliance needs into transparent requirements (process, data, tooling, reporting) that engineers can execute
- Own documentation for current-state and future-state workflows (access reviews, attestations, control evidence)
- Drive audit issue remediation work: track action items, milestones, evidence requirements, and closure progress
- Improve how the team communicates: standardize notifications, messaging, and stakeholder updates
- Support testing efforts (UAT planning/validation) for compliance and automation enhancements
- Help prepare audit evidence packages, coordinate responses, and handle follow-up questions/clarifications
- Train and guide application SMEs to follow consistent processes and deliver audit-ready outputs
What Were Looking For
- 6+ years experience as a Business Analyst in IT, Risk, Audit, or Compliance-adjacent work
- Proven background supporting audit programs, access reviews, or control remediation
- Strong requirements gathering + documentation ability (process mapping, user stories, functional needs)
- Ability to turn compliance expectations into practical technical/operational work
- Excellent stakeholder management; comfortable working across audit, compliance, engineering, and application owners
- Strong coaching/training style communication (able to lead without authority)
- Exposure to controls frameworks and access review programs (e.g., IT controls environments)
- Experience with workflow/ticketing and audit/compliance tooling
- Must have expertise in SOX and IAM
Candidate Interested can apply: .
