Technology Governance & Control Analyst

TowneBank; Suffolk (VA); On-site; USD 83,000 - 112,000; Full time

Job summary

TowneBank seeks a Technology Governance Analyst in Suffolk, VA to develop, maintain, and evaluate the technology control environment. As a first line of defense, you will partner with IT, Information Security, PM, and business analysts to implement policies, standards, procedures, controls, and testing programs that support regulatory compliance and risk management.

You will identify control gaps, drive risk-based remediations, support audits and exams, and help translate regulatory requirements

Qualifications

• Bachelor’s degree required in IT, security, risk, or related field.
• 5-7 years of governance, risk, control, or audit experience.
• Ability to lead cross-functional initiatives.
• Strong knowledge of ITGCs and regulatory frameworks.

Responsibilities

• Develop and maintain governance policies, standards, and procedures.
• Collaborate with IT, InfoSec, PM, and business analysts.
• Evaluate and implement risk-based control improvements.
• Support audit readiness and remediation tracking.
• Produce governance metrics and executive summaries.

Skills

Analytical Thinking

Policy Writing

Process Documentation

Risk Assessment

Audit Readiness

Regulatory Compliance

Attention to Detail

Written Communication

Stakeholder Collaboration

Problem Solving

Organizational Skills

Education

Bachelor’s degree in IT/IS/Cybersecurity or related field

Tools

ServiceNow IRM/GRC

Governance, Risk & Compliance platforms

Microsoft Office Suite

Job description

Primary Purpose

The Technology Governance Analyst is responsible for developing, maintaining, and evaluating the organization’s technology control environment. This role serves as a first line of defense (1LOD) governance partner, working collaboratively with Information Technology, Information Security, Project Management, Application Owners, and Business Analysts to establish policies, standards, procedures, controls, and testing programs supporting regulatory compliance, risk management, and ensuring operational excellence.

As a highly independent contributor, the analyst drives governance and control initiatives, evaluates technology controls, identifies gaps in controls, and collaboratively works to implement risk-based recommendations. The analyst supports audit and exam readiness, collaborates during the audits/exams, and assists in remediation plans. The analyst influences outcomes through technical expertise, analysis, and cross-functional partnership.

The good-faith compensation range for this role is expected to be $82,500 to $112,000, based on the role, market, internal equity, and candidate qualifications.

Essential Responsibilities

Governance, Policy & Procedure Management

• Develop, maintain, and update technology policies, standards, procedures, and operational guidelines.
• Ensure governance documents align with regulatory expectations, industry frameworks, and organizational objectives.
• Facilitate periodic reviews of governance artifacts with business and technology stakeholders.
• Maintain document inventories, version control, approval workflows, and evidence of governance reviews.
• Translate regulatory and audit requirements into practical operational procedures. Adheres to applicable federal laws, rules, and regulations including those related to Anti-Money Laundering (AML) and the Bank Secrecy Act (BSA).

Control Design & Implementation

• Design preventive, detective, and corrective controls across technology processes.
• Develop control documentation including:
  • Control objectives
  • Risk statements
  • Control descriptions
  • Procedures
  • Frequency requirements
  • Ownership assignments
  • Evidence requirements
• Partner with technology teams to integrate controls into operational processes.
• Assist in the implementation of governance processes supporting:
  • Change Management
  • Software Development Lifecycle (SDLC)
  • Access Management
  • Vendor Management
  • Asset Management
  • Disaster Recovery
  • Data Governance
  • Technology Operations
• Performs other duties as required or assigned which are reasonably within the scope of the duties in this job classification.

Risk & Compliance Support

• Support technology risk assessments and control evaluations.
• Assist with mapping controls to:
  • FFIEC requirements
  • NIST Cybersecurity Framework
  • NIST 800-53
  • COBIT
  • ISO 27001
  • Internal Policies and Standards
• Participate in risk and control self-assessments (RCSAs).
• Assist control owners with risk treatment and mitigation planning.

Audit & Examination Readiness

• Support internal audit engagements, external audits, and regulatory examinations.
• Prepare evidence packages, control inventories, and documentation repositories.
• Assist in responding to auditor and examiner requests.
• Maintain current documentation demonstrating control effectiveness.
• Support management action plan development and remediation tracking.

Reporting & Metrics

• Develop governance metrics and control performance reporting.
• Control effectivenessProduce dashboards showing:
  • Testing results
  • Issue status
  • Policy review status
  • Remediation progress
• Prepare executive summaries for leadership and governance committees.

Minimum Required Skills & Competencies

Education

• Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, Business Administration, Risk Management, or related field.

Experience

• 5-7 years of relevant experience with a proven ability to collaboratively lead risk, governance, control, or audit initiatives and provide credible recommendations to stakeholders across one or more of the following:
  • Technology Governance
  • IT Risk Management
  • Information Security Governance
  • Internal Controls
  • Compliance
  • Internal Audit
  • Technology Operations

Knowledge & Skills

Strong understanding of:

• IT General Controls (ITGCs)
• Technology governance principles
• Policy and procedure development
• Control design and implementation
• Risk assessment methodologies
• First line testing methodologies
• Regulatory compliance requirements
• Technology operational processes
• Audit and examination support activities

Experience with:

• ServiceNow IRM/GRC
• Governance, Risk & Compliance platforms
• Microsoft Office Suite
• Risk and control documentation
• Control testing and evidence collection

Desired Skills & Competencies:

• Analytical Thinking
• Control Design & Evaluation
• Policy Writing
• Process Documentation
• Risk Assessment
• Audit Readiness
• Regulatory Compliance
• Attention to Detail
• Written Communication
• Stakeholder Collaboration
• Problem Solving
• Organizational Skills

Physical Requirements:

• Express or exchange ideas by means of the spoken word via email and verbally.
• Exert up to 10 pounds of force occasionally, use your arms and legs, and sit most of the time.
• Have close visual acuity to perform activities such as analyzing data, viewing a computer terminal, reading, and preparing documentation.
• Not substantially exposed to adverse environmental conditions.
• The physical demands described here are representative of those that must be met by an employee to successfully perform the essential responsibilities of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential responsibilities.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.