GRC System Analyst

GENERAL SUMMARY

The GRC System Analyst will be part of Cathay Bank's Enterprise Risk Management team in the Second Line of Defense. This is a technical role and will be responsible for maintaining all Bank's GRC applications, with specific focus on ServiceNow's risk modules, such as BCM (Business Continuity Management) and TPRM (Third-Party Risk Management). In addition, the candidate will be responsible for business analysis across risk domains, collaborating with stakeholders to translate risk management requirements into function system specifications.

The role is a blend of business analysis, GRC systems implementation, configuration, and reporting for the Bank's business and risk management professionals across the three lines of defense. Typical stakeholders may include Risk Management (e.g., Credit Risk, Operational Risk, etc.), Audit, Compliance, Enterprise Risk Management, Model Risk Management, Information Technology, Information Security, Project Management, Third-Party Risk, and Physical Security.

ESSENTIAL FUNCTIONS

• Serve as a subject matter expert in ServiceNow BCM and TPRM, modules, providing development and support - including workflow customization, scripting, process automation, and systems integration.
• Support Bank's GRC and reporting systems (Diligent One, ServiceNow, Power BI) including systems configuration and enhancement, administering user roles and permissions, ensuring data integrity, incident management, and change management.
• Develop custom reports and dashboards within Diligent, ServiceNow, and Power BI.
• Create and maintain training materials and user guides and conduct training sessions to educate users on system functionalities and best practices.
• Serve as a liaison between business units and Enterprise Risk Management for GRC system enhancements.
• Create procedures, processes, and workflow diagrams.
• Understand and enhance the process flows of the Bank's transaction lifecycles across multiple business segments.
• Facilitate ongoing triggers, escalation, and mitigating actions of the relevant control vulnerabilities and risk profile changes.
• Collaborate with various stakeholders to gather requirements, facilitate workshops, and provide training on GRC applications.

QUALIFICATIONS

Education:

• Bachelor's degree in Computer Science, Information Systems, Business, or related field, preferred.

Experience:

• Minimum 2 years of experience in ServiceNow development and architecture.
• Minimum 2 years of experience with Diligent One and/or other GRC tools, capabilities, and reporting features.
• Strong knowledge of risk management and banking operations.
• Experience in maintaining large datasets and risk reporting.

Skills/Ability:

• Previous experience in the financial services industry and/or risk management.
• Proven record of delivering high quality results within strict deadlines.
• Self-motivated with an analytical mindset and a drive to learn new technologies.
• Proficient in business analysis methodologies, tools, and best practices.
• Strong ability to translate business needs into technical requirements.
• Ability to present complex information clearly and concisely to diverse audiences.
• Familiarity with database concepts and SQL for data analysis.
• ServiceNow certification is a plus.
• Knowledge of Python and REST APIs is a plus.
• Proficiency in Microsoft Office suite - Word, Excel, Outlook, SharePoint, Teams.

OTHER DETAILS

$100,000 - $122,800 / year
Pay determined based on job-related knowledge, skills, experience, and location.