Technology Governance Analyst Lead

Finance of America•,

6d•$130,000 - $150,000

About The Position

Responsible for establishing repeatable processes for identifying technologies adopted across the organization, assessing associated risks, onboarding technologies into operational management, and improving visibility into the organization's technology ecosystem. Works collaboratively with Security, IT, Enterprise Architecture, Procurement, Privacy, Legal, and business stakeholders to implement operational processes, technical capabilities, and automation that enable secure technology adoption while supporting effective governance throughout the technology lifecycle.

Requirements

Minimum 7 years of experience in cybersecurity, security engineering, cloud security, technology governance, technology risk, or related disciplines.
Demonstrated experience designing and implementing enterprise security or technology governance capabilities.
Experience implementing technology discovery, SaaS governance, security posture management, or comparable operational capabilities.
Experience building operational processes from concept through implementation and transition to steady-state operations.
Experience integrating enterprise platforms using APIs, scripting, automation, and workflow technologies.
Strong understanding of SaaS applications, cloud services, enterprise identity, modern authentication, application integrations, and technology lifecycle management.
Experience analyzing enterprise telemetry to identify technology adoption patterns, operational gaps, and security risks.
Experience developing automation using scripting languages, APIs, or workflow orchestration platforms.
Strong analytical, investigative, organizational, and documentation skills.
Excellent written and verbal communication skills, with the ability to influence stakeholders across technical and business functions.
Experience delivering technical projects independently within defined timelines.
Bachelor's Degree or comparable qualifications

Nice To Haves

Certified Information Systems Security Professional (CISSP).
Certified Cloud Security Professional (CCSP).
CompTIA Security+.
GIAC security certifications.
Cloud security certifications.
Identity and access management certifications.
Equivalent industry-recognized cybersecurity certifications.

Responsibilities

Develops and implements processes that improve visibility into SaaS applications, cloud services, AI platforms, browser extensions, and other business-adopted technologies.
Analyzes telemetry from enterprise identity, endpoint, cloud, network, browser, and security platforms to identify technologies that have not completed established governance or operational onboarding processes.
Investigates technology usage to determine business purpose, ownership, data sensitivity, regulatory considerations, operational dependencies, and associated security risks.
Partners with business stakeholders to understand technology adoption and facilitate secure onboarding into established operational processes.
Coordinates with IT and technology teams to ensure technologies are appropriately reviewed, documented, inventoried, and transitioned into operational ownership.
Establishes and maintains inventories of business applications, technology owners, integrations, data classifications, and associated risk information.
Performs technical risk assessments and recommend practical security controls and mitigation strategies that support business objectives.
Implements and optimizes capabilities supporting technology governance, technology inventory, and security posture management.
Develops automation using scripting, APIs, and workflow technologies to improve discovery, inventory synchronization, reporting, and lifecycle management.
Produces operational and executive reporting that communicates technology adoption trends, governance maturity, operational metrics, and technology risks.
Builds trusted relationships across technical and business teams to encourage secure technology adoption and effective governance.
Documents all implemented processes, workflows, and operational procedures to support long-term sustainability.
Performs other duties as assigned.