5+ years in IT governance, technology audit, information security, or IT risk management
Bachelor's or Master's in Computer Science, Information Systems, Cyber Security, or related field
Required IT audit background with essential AWS experience
Knowledge of IT General Controls (ITGC)
Preferred certifications: CISA, CRISC, or CISSP
Strong grasp of internal audit standards and risk testing
Ability to simplify complex technical concepts into clear policy language
Responsibilities
Conduct IT audits to assess compliance and risk management
Develop and implement IT governance frameworks
Evaluate IT General Controls and recommend improvements
Translate technical findings into actionable reports
Collaborate with teams to enhance Secure Software Development Lifecycle processes
Monitor regulatory compliance and internal audit standards
Facilitate risk assessments and control validations
Benefits
Hybrid work model with on-site requirements
Opportunity for professional development and certifications
Engagement in cutting-edge technology projects
Collaborative work environment
Focus on work-life balance
Full Job Description
IT Audit/Technology Governance Specialist Duration: Direct-hire Location: Hybrid in Boston (on-site 3x per week)
Experience:
5+ years of experience in IT governance, technology audit, information security, or IT risk management
Bachelor's or Master's degree in Computer Science, Information Systems, Cyber Security, or a related field
IT audit background required, AWS experience is essential
IT General Controls (ITGC) knowledge
Preferred certifications: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Security Professional (CISSP)
Solid understanding of internal audit standards, risk testing, and control validation
Exceptional ability to translate complex technical concepts into clear, written policy language
Strong problem-solving skills with high attention to regulatory and procedural details
Experience implementing review and approval processes within a Secure Software Development Lifecycle (SSDLC), including use of modern fully integrated and automated processes within the CI/CD pipeline
