Governance, Risk and Compliance Analyst
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
By continuing, you agree to our Terms & Privacy Policy.
Governance, Risk and Compliance Analyst (Program Admin Officer 3)
Competition # : 50007
Department: Finance and Treasury Board
Location: HALIFAX
Type of Employment: Permanent
Union Status: NSGEU - NSPG
Closing Date: 29-Oct-26 (Applications are accepted until 11:59 PM Atlantic Time)
About Us
The Department of Finance and Treasury Board works to preserve the financial capacity of the Government of Nova Scotia for public programs and services by providing advice on fiscal sustainability for the Province. To deliver its mandate, the department is guided by its core functions of: budget and fiscal plan development; financial accounting; expenditure and financial management; financial advisory services; corporate strategic initiatives; revenue estimates and federal transfers; tax policy, administration, and credits; economic and demographic forecasting, policy analysis, and modelling; liability and treasury management; lending to municipalities, capital markets administration, and compliance; regulation of pensions and select financial institutions; oversight on gaming operations, policy oversight to specific agencies, boards, and commissions; and labour relations.
About Our Opportunity
As the Program Administration Officer 3 - Governance, Risk and Compliance (GRC) Analyst, you will serve as the primary point of contact for users of the Province's SAP Governance, Risk and Compliance (GRC) solution. Reporting to the ICFR Manager, you will provide subject matter expertise and technical leadership related to SAP GRC Access Control (AC) and Process Control (PC).
In this role, you will support the ongoing administration of the Province's GRC environment by monitoring segregation of duties risks, managing user access compliance, and supporting internal control processes. You will work closely with business owners, technical teams, and service providers to deliver solutions that strengthen governance, security, compliance, and internal controls.
Primary Accountabilities
As the GRC Analyst, you will:
- Provide expert support for the Province’s SAP GRC users with regards to Access Control and Process Control modules.
- Investigate and resolve functional, operational, and system-related issues through knowledge of business processes, security roles, and IBM’s SAP configuration role.
- Conduct user access and mitigating control reviews, analyze segregation of duties (SoD), and compliance monitoring activities.
- Analyze risks, identify control gaps, and provide recommendations to strengthen security, compliance, and internal controls.
- Manage, test, monitor, and report on internal controls in GRC Process Control.
- Develop and deliver user training and maintain procedures, workflows, and documentation for GRC system functions.
- Collaborate with business, technical, and service-provider teams on upgrades, enhancements, and continuous improvement.
Qualifications and Experience
To be successful in this role, you will have:
- A bachelor's degree or diploma in Business Administration, Commerce, Information Systems, Finance, Accounting, Computer Science, or a related discipline, plus five (5) years of related experience; an equivalent combination of education and experience may be considered.
- Experience with enterprise business systems, preferably SAP.
- Understanding of GRC, internal controls, segregation of duties concepts, security access management, and risk mitigation practices.
- Demonstrated experience analyzing, interpreting, and reporting data and information from large databases.
- Proven ability to manage multiple priorities and work independently while collaborating effectively with diverse stakeholder groups.
- Attention to detail, critical thinking and sound judgment.
- Strong verbal and written communication, facilitation, and relationship-building skills.
- Proficient in the following: Microsoft Word, Excel, Outlook, and PowerPoint.
Experience with SAP GRC Access Control and/or Process Control, or information technology security would be considered an asset.
We will assess the above qualifications and competencies using one or more of the following tools: written examination, standardized tests, oral presentation, interview(s), and reference checks.
Equivalency
An equivalent combination of training, education and experience will be considered. Applicants relying on education and experience equivalencies must demonstrate such equivalencies in their application.
Based on the employment status and union agreement, the Government of Nova Scotia offers its employees a wide range of benefits such as a Defined Bene