Governance Analyst (IT Compliance)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Governance Analyst (IT Compliance): Overseeing the enterprise technology governance framework, lifecycle management, and IT compliance policies with an accent on aligning technical operations with regulatory standards. Focus on designing IT standards, conducting technical risk assessments, and managing audit remediation plans.
Location: Hybrid - Boston, MA (USA)
Company
is a technology and professional services firm specializing in innovative technologies and advanced technology management.
What you will do
- Draft, review, and update IT policies and technical standards aligned with ISO, COBIT, NIST, and ITIL.
- Manage the end-to-end lifecycle of hardware, software, and enterprise applications using SAM and CMDB.
- Conduct technical risk assessments and integrate secure baselines into the SSDLC and CI/CD pipelines.
- Act as the primary liaison for internal and external technology audit teams and track remediation plans.
- Support Access Management processes, including user access requests and periodic reviews.
Requirements
- 5 to 8+ years of experience in IT governance, technology audit, information security, or IT risk management.
- In-depth knowledge of NIST, ISO/IEC 27001, COBIT, and ITIL frameworks.
- Hands-on experience with ITAM and ITSM tools such as ServiceNow, Jira, or Flexera.
- Understanding of internal audit standards, risk testing, and control validation.
- Bachelor's or Master's degree in Computer Science, Cyber Security, or a related technical field.
- Must be based in the US and able to work hybrid in Boston, MA.
- Available for a contract position of 6 or more months.
Nice to have
- Professional certifications such as CISA, CRISC, or CISSP.
- Experience in highly regulated environments like financial services or investment management.
- Experience coordinating third-party vendor risk assessments.
Culture & Benefits
- Competitive salary.
- Flexible work from home options.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →