IT Security Governance Analyst

Madison-Davis, LLC; New York (NY); On-site; USD 90,000 - 130,000; Full time

Job summary

Madison-Davis, LLC in New York is seeking an IT Security Governance Analyst to support technology audits, security governance, risk assessments, and compliance activities. You will work with technology, security, and business stakeholders to improve governance workflows and automation.

The role emphasizes hands-on experience with IT controls, audit evidence, and risk processes, plus collaboration across teams.

Qualifications

• Working knowledge of IT audit, security governance, control testing, and risk assessment principles.
• Experience or exposure to evidence collection and audit documentation.
• Understanding of IAM, authentication, encryption, least privilege, and common security risks.
• Basic knowledge of SQL, APIs, scripting, or comparable automation concepts.
• Experience or exposure to regulated or controlled environments.
• Strong attention to detail and organizational skills.
• Ability to coordinate with technical and business stakeholders.
• Willingness to learn and contribute to process improvements.
• Ability to work onsite three days per week in Midtown Manhattan.

Responsibilities

• Coordinate internal and external IT audit requests.
• Collect, assess, and maintain security control evidence.
• Support third-party and application risk assessments.
• Review access management, authentication, encryption, and data protection controls.
• Document governance findings, control gaps, and risk decisions.
• Coordinate remediation tracking and follow-up with stakeholders.
• Prepare governance reports and maintain accurate assessment records.
• Identify opportunities for process improvements and basic automation.

Skills

IT audit

Security governance

Control testing

Risk assessment

Evidence collection

Automation concepts

SQL basics

Scripting basics

Stakeholder coordination

Attention to detail

Tools

GRC platforms

IAM

SIEM

Reporting platforms

Job description

A financial-services organization is seeking an IT Security Governance Analyst to support technology audits, security governance, risk assessments, and compliance activities.

The ideal candidate will have hands-on experience with IT controls, audit evidence, and security risk processes, along with strong organizational skills and an interest in improving governance workflows.

The role provides opportunities to work closely with technology, security, and business stakeholders while developing practical automation capabilities.

Responsibilities

• Coordinate internal and external IT audit requests.
• Collect, assess, and maintain security control evidence.
• Support third-party and application risk assessments.
• Review access management, authentication, encryption, and data protection controls.
• Document governance findings, control gaps, and risk decisions.
• Coordinate remediation tracking and follow-up with stakeholders.
• Prepare governance reports and maintain accurate assessment records.
• Identify opportunities for process improvements and basic automation.

Role Requirements

• Working knowledge of IT audit, security governance, control testing, and risk assessment principles.
• Experience or exposure to evidence collection and audit documentation.
• Understanding of IAM, authentication, encryption, least privilege, and common security risks.
• Basic knowledge of SQL, APIs, scripting, or comparable automation concepts.
• Experience or exposure to regulated or controlled environments.
• Strong attention to detail and organizational skills.
• Ability to coordinate with technical and business stakeholders.
• Willingness to learn and contribute to process improvements.
• Ability to work onsite three days per week in Midtown Manhattan.

Nice to Have

• IT audit, cyber GRC, technology risk, or cybersecurity consulting experience.
• Financial-services or other regulated-industry experience.
• SOC/SOX controls or vendor risk assessments.
• Experience with GRC, IAM, SIEM, or reporting platforms.