Senior Governance Analyst​/Technology Audit

We are seeking an experienced Senior Governance Analyst for a contract or FTE opportunity with an organization focused on enterprise technology, information security, and regulatory compliance. This role will support the development and implementation of IT governance frameworks, technology lifecycle management, risk mitigation, and audit readiness across enterprise systems and infrastructure. The ideal candidate will have expertise in NIST, ISO/IEC 27001, COBIT, ITIL, and technology management tools such as Service Now, Jira, and Flexera.

This is an excellent opportunity for a technology governance professional to make a meaningful impact by strengthening enterprise security, improving compliance processes, and ensuring technology assets are managed effectively throughout their lifecycle. The organization is looking for a detail-oriented analyst who can bridge the gap between technical teams and compliance stakeholders, drive governance improvements, and help maintain a secure and resilient technology environment.

You will collaborate with Engineering, Information Security, Enterprise Risk, Finance, Vendor Risk Management, and Internal Audit teams, providing opportunities to expand your expertise in technology risk, security governance, audit management, and enterprise-wide process improvement.

Contract Duration: To be determined

• 5-8 years of experience in IT governance, technology audit, information security, or IT risk management.
• Bachelor's or Master's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• Strong knowledge of NIST, ISO/IEC 27001, COBIT, and ITIL frameworks.
• Experience developing, reviewing, and maintaining IT policies, procedures, technical standards, and governance documentation.
• Hands-on experience with IT Asset Management (ITAM), Software Asset Management (SAM), IT Service Management (ITSM), and Configuration Management Database (CMDB) processes.
• Experience conducting technology risk assessments, validating controls, identifying compliance gaps, and developing risk mitigation plans.
• Understanding of internal and external technology audits, audit evidence collection, control testing, and remediation tracking.
• Experience supporting access management processes and periodic reviews of user, service, and operational accounts.
• Knowledge of Secure Software Development Lifecycle (SSDLC) governance, review and approval processes, and CI/CD pipeline controls.
• Excellent written and verbal communication skills, with the ability to translate complex technical concepts into clear policies and procedures.
• Strong analytical, organizational, problem-solving, and stakeholder management skills.

• Certifications such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Security Professional (CISSP).
• Experience with Service Now, Jira, Flexera, or similar ITAM, ITSM, and governance platforms.
• Experience managing technology assets from procurement through retirement, including upgrades, migrations, and decommissioning.
• Familiarity with vulnerability management, security baselines, data protection requirements, and regulatory compliance.
• Experience maintaining risk registers, documenting risk acceptance criteria, and tracking mitigation plans through closure.
• Experience coordinating with Engineering, Finance, Information Security, Enterprise Risk, Vendor Risk Management, and Internal Audit teams.
• Knowledge of automated compliance monitoring, control validation, and security approval workflows integrated into CI/CD pipelines.
• Experience with vendor relationship management, technology obsolescence planning, and legacy system remediation.

• 30% IT Governance, Standards, Policies & Compliance
• 25% Technology Lifecycle Management, ITAM, SAM & CMDB
• 20% Technology Risk Management & Information Security
• 15% Technology Audit, Control Testing & Remediation
• 10% Access Management & SSDLC Governance

• 45% Hands-On Governance, Risk Assessments & Compliance Activities
• 20% Governance Planning, Documentation & Process Improvement
• 35% Team Collaboration & Stakeholder Management

• Draft, review, and maintain IT policies, procedures, technical standards, and governance documentation.
• Align technology governance processes with NIST, ISO/IEC 27001, COBIT, ITIL, and applicable regulatory…