GRC Business Analyst

Job description Job Title: GRC Business Analyst (contract) Location: Hybrid at any UK Deloitte office location (e.g. Manchester, Edinburgh, Cardiff, Bristol, Leeds or London) with 1-2 days a week in the office Duration: 6 months (with potential to extend) Contract Start Date: ASAP February 2026 Deloitte Working with the Deloitte Associate (Contractor) Programme means we can offer you the opportunity to work on a variation of industry and client related projects. Our aim is to retain the best talent and so when your project end date nears our team of Talent Community Advisors will be working with you to look at alternative projects within the firm that suit your experience should you wish to continue with Deloitte. The Role This is an exceptional opportunity for a Business Analyst with a proven track record in delivering complex GRC technology projects. You will work with diverse clients, from industry giants to innovative start-ups, helping them navigate the ever-evolving world of GRC. You will possess leadership, communication, and problem-solving skills, along with a deep understanding of industry best practices and emerging trends. You will demonstrate and develop your capabilities in the following areas: • Lead client workshops to gather requirements and understand current-state processes and challenges. • Support business development initiatives to drive the growth of Deloitte's GRC technology practice. • Analyse and document business requirements related to GRC processes and systems, with a focus on ServiceNow IRM. • Translate business requirements into functional specifications and user stories for GRC/IRM configurations and customisations. • Deliver compelling client demonstrations of GRC solutions and their value proposition. • Work closely with GRC developers and architects to ensure solutions meet client requirements and align with best practices. • Develop training materials and facilitating training sessions for clients • Support the continuous improvement of our GRC delivery methodology, tools and best practices. Essential Skills and Experience • A Business Analyst with experience in GRC domains and implementing technology platforms. • Experience working with ServiceNow IRM or other enterprise GRC platforms like Workiva, AuditBoard, Archer, SAP GRC etc. • Experience in JIRA, ServiceNow Agile or similar agile platforms. • Stakeholder Management - Experience of collaborating and managing relationships with business stakeholders, at all levels, including senior partners (Head of GRC, CRO, CSIO, etc) with the ability to challenge where required. Experience of collaborating and advising clients. • Strong analytical and problem-solving skills, with the ability to understand complex business processes. • Excellent communication, interpersonal, and presentation skills, with the ability to communicate effectively with both technical and non-technical audiences. • Strong documentation skills, with experience in creating clear and concise business requirements documents and user stories. • Proven experience working in Agile project environments, demonstrating a strong understanding of Agile methodologies and tools. • Can work independently and as part of diverse teams in a fast-paced, deadline-driven environment. Desirable • ServiceNow CIS IRM and equivalent certifications are preferred • Eligible and willing to obtain UK Government Security Clearance (i.e. must have lived in the UK for the last 5 years) is highly desirable Deliverables: Responsibilities but not limited to: 1. User Stories and Functional Design 1. Acceptance Criteria 1. Training Manual IR35 As a means of managing tax, commercial and reputational risks, Deloitte prohibits the use of Associates through Personal Service Companies (‘PSCs’). All Associates must contract under PAYE arrangements through a Deloitte approved ‘Employment Company’ (aka ‘umbrella company.’)