GRC (Governance, Risk and Compliance) Analyst
Boost, the digital services arm of Axiata Group Berhad, is at the forefront of digital transformation operating brands that specialise in digital payments, digital financing, and platforms. With a focus on driving innovation and fostering synergies within the digital ecosystem, Boost plays a pivotal role in empowering businesses and consumers to embrace the boundless opportunities of the digital era.
Location : Federal Territory of Kuala Lumpur, Malaysia
Role Overview
We are seeking a highly motivated and detail-oriented GRC Analyst to join our team. The GRC Analyst will assist in the development, implementation, and management of governance, risk, and compliance programs. The GRC Analyst is responsible for supporting the organization's information security governance framework, risk management processes, and regulatory compliance efforts. As part of the Second Line of Defense, the GRC Analyst helps ensure security risks are identified, assessed, and mitigated, and that policies, standards, and procedures are implemented to maintain compliance with internal and external requirements.
Key Responsibilities
- Contribute to identifying, assessing, and documenting risks and controls.
- Facilitate conducting risk assessments and internal audits to evaluate the effectiveness of existing controls.
Compliance
Support the implementation and maintenance of compliance programs to ensure adherence to regulatory requirements.Assist in the preparation and submission of compliance reports.Governance
Contribute to the development and maintenance of governance frameworks, standards, guidelines, policies and procedures.Support the monitoring and enforcement of governance standards across the organization.Data Analysis & Reporting
Collect and analyse data to identify trends, issues, and areas for improvement.Assist in preparing reports and presentations for senior management and other stakeholders.Training & Awareness
Assist in the development and delivery of training programmes to educate employees on GRC policies and procedures.Contribute to promoting a culture of compliance and risk awareness throughout the organization.Documentation
Maintain accurate and up-to-date documentation of all GRC activities.Assist in the development and maintenance of risk registers, compliance matrices, and other GRC‑related documentation.New / Future
Support governance reviews to ensure compliance with cybersecurity frameworks and best practices (e.g., ISO 27001, NIST, CIS).Assist in tracking regulatory requirements and controls across applicable standards (e.g., PCI DSS, GDPR, BNM‑RMIT, MAS TRM).Work closely with Information Security, Internal Audit, Legal, and Business Units.Serve as a liaison for third‑party risk and due diligence assessments.Qualifications
Minimum 5 years of experience in GRC, risk management, compliance, or a related field (internship experience acceptable).Basic understanding of GRC concepts and frameworks (e.g., ISO 27001, NIST, GDPR).Familiar with financial services sector, financial transaction processes, technology systems, regulatory requirements and internal controls.Strong analytical and problem‑solving skills.Excellent written and verbal communication skills.Proficiency in Microsoft Office Suite (Word, Excel, PowerPoint).Detail‑oriented with strong organisational skills.Ability to work independently and as part of a team.Preferred Qualifications
Experience with GRC tools and software is advantageous.Education Background
Bachelor’s degree in information security, security assurance, business administration, finance, or a related field.Seniority level
Executive
Employment type
Full‑time
Job function
Information Technology and Analyst
Industries
Banking, Insurance, and Information Services
#J-18808-Ljbffr