Technology Governance Associate
About The Position
The Technology Governance Associate supports the development, implementation, and ongoing operation of technology governance, risk, and compliance activities across HUB Technology & Operations. This hands-on, cross-functional role works with Technology Governance leadership and team members on control framework development, control implementation, process documentation, compliance operations, and governance technology enablement. The position supports the governance and control lifecycle, including blueprint development, discovery, gap identification, remediation tracking, evidence management, continuous monitoring, and reporting. Its primary focus is HUB TechOps’ IT General Controls and related technology governance activities. Familiarity with cybersecurity, privacy, resilience, third-party technology risk, data governance, and emerging technology governance is helpful but not required; these areas may become part of the role as priorities evolve. The successful candidate is organized, analytical, detail-oriented, and comfortable working with multiple stakeholders to translate governance requirements into practical deliverables. Responsibilities may evolve based on team priorities.
Requirements
- Strong working knowledge of SOX 404, PCAOB AS 2201, ITGC control domains, NYDFS 23 NYCRR 500, SOC 2, COSO 2013, ISO 31000, COBIT, and the Three Lines Model.
- Ability to interpret established control requirements, assess operational practices, identify gaps, and support practical control implementation and remediation.
- Demonstrated ability to conduct process discovery, analyze current-state activities, and develop control blueprints, process narratives, workflows, risk assessments, and other governance deliverables.
- Strong analytical skills and attention to detail, with the ability to translate complex information into clear, actionable documentation and recommendations.
- Familiarity with GRC platforms, workflow technologies, reporting tools, and automation capabilities, and ability to support control implementation, evidence management, remediation tracking, and continuous monitoring.
- Ability to identify opportunities to streamline governance processes, improve data quality, and reduce manual activities through standardized workflows and technology.
- Strong communication and interpersonal skills, with the ability to independently engage control owners, technology teams, and governance stakeholders to gather requirements, resolve outstanding items, and complete assigned deliverables.
- Demonstrated ability to manage multiple assignments, collaborate across functional teams, take ownership of execution, and adapt to evolving priorities and responsibilities.
Nice To Haves
- Familiarity with cybersecurity, privacy, resilience, third-party technology risk, data governance, or emerging technology governance.
Responsibilities
- Assist with developing and maintaining technology control blueprints, implementation guides, discovery workbooks, evidence schedules, standard operating procedures, and other governance deliverables.
- Document and maintain control objectives, activities, execution requirements, evidence expectations, and ownership responsibilities.
- Map relationships between risks, regulatory requirements, policies, standards, procedures, applications, and technology controls.
- Identify documentation gaps, inconsistencies, and opportunities to standardize governance artifacts; support quality reviews, updates, and publication.
- Participate in discovery sessions with application owners, system administrators, process owners, and other technology representatives.
- Document current-state processes, control activities, roles and responsibilities, system dependencies, and supporting evidence.
- Identify gaps between existing processes and established control requirements, and translate findings into implementation actions, remediation items, and follow-up activities.
- Support development of process narratives, workflows, RACI matrices, risk assessments, and operating procedures.
- Coordinate with control owners to obtain documentation, clarify outstanding questions, and support implementation readiness.
- Assist in assessing how changes in technology, processes, or regulatory expectations affect governance, risk, control, and compliance requirements.
- Support control monitoring, evidence readiness, remediation tracking, and compliance reporting.
- Maintain evidence schedules, control inventories, ownership records, and recurring compliance calendars.
- Collect, organize, and review control documentation and evidence for completeness against established requirements.
- Support development and maintenance of control performance metrics, KPIs, exception reporting, and monitoring dashboards.
- Document control deficiencies, track corrective actions, and prepare status updates; support future control self-assessment activities.
- Identify changes in regulatory expectations, industry practices, and technology risks that may require governance documentation or control updates.
- Use approved GRC platforms to manage control records, implementation workflows, gaps, remediation, evidence, and reporting.
- Support workflow documentation, configuration, user acceptance testing, and process improvements under the direction of functional leads and authorized platform administrators.
- Maintain accurate control and compliance information in approved systems and coordinate data consistency across governance platforms, SharePoint, AuditBoard (Optro), and other relevant systems.
- Identify opportunities to automate manual activities and improve standardized workflows, reporting, dashboards, and visibility into control performance, remediation, and compliance obligations.
Benefits
- Comprehensive health, dental, vision, life, and disability insurance
- Flexible spending accounts (FSA)
- Health savings accounts (HSA)
- 401(k) accounts and retirement savings matching
- Paid time off, including vacation, sick, personal, floating holidays, and company holidays
- Paid parental leave
- Wellbeing program
- Company-paid life and disability plans
- Structured training, licensing support, and ongoing development opportunities
- Eligible annual bonuses, equity, and commissions may be available for some positions
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
