What does An IT Risk & Compliance Analyst do?
An IT Risk & Compliance Analyst is responsible for assessing IT systems and processes against regulatory and internal-control frameworks, documenting findings, and tracking remediation for banks, GCCs, and BPOs operating under BSP and data-privacy rules.
Day-to-day responsibilities
- Running IT general controls testing
- Mapping findings against BSP circulars or ISO 27001 requirements
- Coordinating with audit and security teams on remediation
- Preparing compliance reports for regulators or head-office risk committees
Low demand+16% ISO 27001 / IT governance frameworks+14% BSP regulatory reporting+13% SOX / IT general controls testing