Senior Technology Governance Analyst

Senior Technology Governance Analyst

Geode Capital Management, LLC is seeking a highly skilled Senior Technology Governance Analyst to oversee our technology governance framework and lifecycle management processes. In this role, you will design, implement, and maintain IT standards, policies, and procedures while ensuring all technology assets are tracked from procurement to retirement. Utilizing your background in technology audit, risk management, and information security, you will bridge the gap between technical operations and compliance, ensuring our infrastructure remains secure, resilient, and fully aligned with regulatory requirements.

This role is based in our office in Boston, Massachusetts. You are required to follow the firm's policy on in-office attendance.

Responsibilities:

• Standards, Policies & Procedures:
• Draft, review, and update comprehensive IT policies, procedures, and technical standards
• Align IT frameworks with industry best practices and standards such as ISO, COBIT, NIST, and ITIL
• Drive organization-wide adoption of technology standards through training and documentation
• Evaluate existing technology governance, compliance and risk processes regularly to identify gaps, inefficiencies, and areas for governance improvement
• Technology Lifecycle Management (TLM):
• Manage the end-to-end lifecycle of hardware, software, and enterprise applications
• Track asset health, support status, and obsolescence risks to prevent operational disruptions
• Collaborate with Engineering, Finance, Vendor Risk management groups to identify, track and plan upgrades, migrations, and decommissioning of legacy systems, and act as vendor relationship manager for selected vendor partners.
• Maintain the definitive software asset management (SAM) and hardware configuration management database (CMDB)
• Technology Risk & Information Security:
• Conduct technical risk assessments on existing infrastructure and newly proposed technologies
• Identify vulnerability patterns and ensure security baselines are integrated into the deployment lifecycle
• Partner with Information Security team to validate that policies meet strict data protection regulations
• Develop risk mitigation strategies and maintain the details of known risks, mitigation plans, risk acceptance criteria, periodic renewal & closure of risks, in partnership with Enterprise Risk
• Technology & Internal Audit
  
  Collaboration:
• Act as a liaison for internal and external technology audit teams during reviews
• Gather, validate, and organize audit evidence to demonstrate continuous compliance
• Track audit findings and remediation plans, ensuring technical teams resolve deficiencies on schedule
• Perform pre-audit readiness assessments to proactively identify and fix compliance gaps
• Other Governance activities:
• Assist in the ongoing execution and enhancement of Access Management processes, including maintaining and updating job profiles and supporting the user community with access-related requests
• Provide support for periodic access reviews for both user and service/operational accounts, ensuring completeness and accuracy

Skills You Bring:

• 5-8 years of experience in IT governance, technology audit, information security, or IT risk management
• Bachelor's or Master's degree in Computer Science, Information Systems, Cyber Security, or a related field
• Preferred certifications:
  Certified Information Systems Auditor (CISA) or Certified in Risk and Information Systems Control (CRISC) or Certified Information Systems Security Professional (CISSP)
• Deep knowledge of NIST, ISO/IEC 27001, COBIT, and ITIL frameworks
• Hands-on experience with ITAM/ITSM tools (e.g., Service Now, Jira, Flexera)
• Solid understanding of internal audit standards, risk testing, and control validation
• Exceptional ability to translate complex technical concepts into clear, written policy language
• Strong problem-solving skills with high attention to regulatory and procedural details
• Experience implementing review and approval processes within a Secure Software Development Lifecycle (SSDLC), including use of modern fully integrated and automated processes within the CI/CD pipeline
• Excellent verbal and written communication skills
• Strong relationship building, organization, and critical thinking skills

Company Overview:

Founded in 2001, Geode is headquartered in Boston's financial district, the center of one of the world's most vibrant finance and technology hubs and employs approximately 200 employees. Geode is an institutional asset manager providing core beta exposures across a range of equity and niche asset classes, with over $2 trillion. With a robust infrastructure and experienced investment professionals, Geode offers the scale of a large asset management firm with the benefits of a smaller organization.

Our compensation philosophy is designed to attract, motivate, and retain top talent. We are committed to ensuring that compensation reflects the value our employees bring to Geode. Employees at all levels are eligible to receive a combination of base salary,…