IT Security Governance Analyst

Job Description

A financial-services organization is seeking an IT Security Governance Analyst to support technology audits, security governance, risk assessments, and compliance activities.

The ideal candidate will have hands-on experience with IT controls, audit evidence, and security risk processes, along with strong organizational skills and an interest in improving governance workflows.

The role provides opportunities to work closely with technology, security, and business stakeholders while developing practical automation capabilities.

Responsibilities

• Coordinate internal and external IT audit requests.
• Collect, assess, and maintain security control evidence.
• Support third-party and application risk assessments.
• Review access management, authentication, encryption, and data protection controls.
• Document governance findings, control gaps, and risk decisions.
• Coordinate remediation tracking and follow-up with stakeholders.
• Prepare governance reports and maintain accurate assessment records.
• Identify opportunities for process improvements and basic automation.

Role Requirements

• Working knowledge of IT audit, security governance, control testing, and risk assessment principles.
• Experience or exposure to evidence collection and audit documentation.
• Understanding of IAM, authentication, encryption, least privilege, and common security risks.
• Basic knowledge of SQL, APIs, scripting, or comparable automation concepts.
• Experience or exposure to regulated or controlled environments.
• Strong attention to detail and organizational skills.
• Ability to coordinate with technical and business stakeholders.
• Willingness to learn and contribute to process improvements.
• Ability to work onsite three days per week in Midtown Manhattan.

Nice to Have

• IT audit, cyber GRC, technology risk, or cybersecurity consulting experience.
• Financial-services or other regulated-industry experience.
• SOC/SOX controls or vendor risk assessments.
• SQL, Python, JavaScript, dashboards, or workflow automation experience.
• Experience with GRC, IAM, SIEM, or reporting platforms.