Senior Governance Analyst / Technology Audit

Responsibilities: Draft, review, and maintain IT policies, procedures, standards, and governance documentation Align governance processes with NIST, ISO/IEC 27001, COBIT, ITIL and regulatory requirements Drive adoption of technology standards through documentation, training, and stakeholder engagement Identify gaps and opportunities to improve governance and compliance processes Manage end-to-end technology lifecycle (procurement to retirement) and maintain SAM/CMDB records Monitor asset health and obsolescence risks; coordinate upgrades and decommissioning with Engineering, Finance, and Vendor Risk Management Conduct risk assessments and validate controls; track remediation and mitigation plans Coordinate with internal and external audit teams; gather evidence and support audit readiness Support access management and SSDLC governance; integrate controls into CI/CD pipelines Collaborate with cross-functional teams to improve risk management, governance workflows, and control effectiveness

Key requirements: 5–8 years in IT governance, technology audit, information security, or IT risk management Bachelor's or Master's degree in Computer Science, Information Systems, Cybersecurity, or related field Strong knowledge of NIST, ISO/IEC 27001, COBIT, ITIL Experience developing, reviewing, and maintaining IT policies, procedures, standards, and governance documentation Hands-on experience with ITAM, SAM, ITSM, and CMDB processes Experience conducting technology risk assessments, validating controls, and developing risk mitigation plans Understanding of audit processes, evidence collection, and remediation tracking Experience supporting access management processes and periodic reviews Knowledge of SSDLC governance and CI/CD security controls Excellent written and verbal communication and stakeholder management skills Strong analytical and organizational skills strong communication stakeholder management problem-solving NIST ISO/IEC 27001 COBIT