Governance Analyst

Tri-Force Consulting Services, Inc.•Philadelphia, PA

2d•Hybrid

About The Position

The Governance Analyst will be responsible for developing, implementing, and maintaining IT and AI governance frameworks, standards, policies, and operational controls. This role involves managing enterprise GRC workflows, benchmarking against global AI regulations, and leading IT Governance, Risk, and Compliance (GRC) efforts. The analyst will collaborate with various teams to evaluate data governance maturity, establish strategic guardrails for data governance and AI security, and conduct vendor compliance audits. Additionally, the role requires synthesizing technical risk data into executive-ready reports and dashboards, serving as a subject matter expert for GRC audits, and maintaining governance metrics and KPIs.

Requirements

Bachelor’s degree in information technology, Management Information Systems, IT Audit or other related fields of study.
Minimum of 4 years of hands-on experience in an Information Technology \ Governance Environment
Strong oral and written communication skills for knowledge transfer.
Experience to conduct risk assessments to determine actions and strategic next steps
Demonstrated effectiveness in Governance, Risk and Compliance
Proficiency with software products, including: IT Governance Tool – OneTrust preferred
Data Governance Tools (e.g., Databricks, Alation, Collibra)
Data and AI Security (e.g., Varonis, MS Purview)
Vendor Audit
Maintaining, updating, and creating Frameworks, controls, and policies
Ability to create clear and concise reports and presentation for management and leadership

Nice To Haves

Master’s Degree preferred
Industry Certifications preferred (e.g., CRISC or CISA)
Experience with Tableau or other BI tools a plus

Responsibilities

Develop, implement, maintain, and update PGW’s IT and AI governance frameworks, standards, policies, and operational controls.
Manage enterprise GRC workflows within OneTrust, establishing standardized compliance tracking, continuous control monitoring, and automated risk reporting.
Benchmark governance programs against emerging global AI regulations, ethical standards, and industry guidelines.
Lead IT Governance, Risk, and Compliance (GRC) efforts, ensuring technology initiatives adhere to internal policies, third-party audit requirements, and external standards.
Collaborate with data engineering and security teams to evaluate data governance maturity using platforms such as Databricks and/or other Data Governance Tools.
Establish strategic guardrails for data governance and AI security by partnering with enterprise data architects and security leads using platforms such as Databricks, Microsoft Purview, and Varonis.
Set criteria and perform vendor compliance audits and assessments for third-party IT applications, cloud providers, and external AI tools.
Negotiate risk mitigation plans with external vendors.
Synthesize complex technical risk data into clear, concise, and executive-ready dashboards, reports, and presentations.
Design and maintain governance metrics, KPIs, and report models using business intelligence tools such as Tableau.
Serve as the primary subject matter expert for internal and external GRC audits.