Technology Risk Governance Analyst

Required Skills & Experience

• 4-6+ years of experience in Information Security, Technology Risk, IT Audit, Governance, Risk & Compliance (GRC), or a related field.
• Experience conducting risk assessments and control gap analyses within enterprise technology environments.
• Strong understanding of security controls, technology governance, and risk management principles.
• Experience supporting both cloud and on-premises infrastructure environments.
• Ability to assess technology exceptions, standards deviations, and compensating controls.
• Experience working cross-functionally with engineering, security, infrastructure, and business teams.
• Strong written and verbal communication skills with the ability to articulate technical risks to non-technical audiences.

Nice to Have Skills & Experience

• Experience managing technology exception, risk acceptance, or waiver processes within a large enterprise.
• Familiarity with common security and control frameworks such as NIST, ISO 27001, CIS Controls, or COBIT.
• Experience using GRC platforms for risk tracking and governance workflows.
• Background in regulated industries such as financial services, fintech, healthcare, or technology.
• Understanding of identity and access management, authentication controls, infrastructure security, and security governance practices.

Job Description

Insight Global is seeking a Technology Risk Governance Analyst to support a Fortune 100 fintech organization. This individual will evaluate technology exception requests, standards deviations, and risk acceptance activities across cloud and on-premises environments. The ideal candidate has experience within GRC, technology risk, or information security and can effectively assess control gaps, compensating controls, and overall risk exposure.

Responsibilities:

• Review, assess, and manage technology exception and risk acceptance requests.
• Analyze control gaps and evaluate associated risk, impact, and mitigating controls.
• Partner with engineering, security, and business stakeholders to collect supporting information and facilitate reviews.
• Track exception requests through approval, renewal, and closure processes.
• Maintain risk documentation, exception inventories, and governance records.
• Prepare reporting and trend analysis on exception activity, recurring risks, and control deficiencies.
• Ensure governance requirements, standards, and risk records remain accurate and up to date.