Technology Governance Specialist (IT Audit)

Motion Recruitment; Boston (MA); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Motion Recruitment in Boston is seeking an IT Audit/Technology Governance Specialist to lead governance, risk, and controls in a hybrid role, onsite 3 days per week. You will collaborate with IT security, audit, and risk teams to strengthen ITGC and SSDLC controls, translating complex concepts into clear policy language.

Ideal candidates have 5+ years in IT governance or IT risk, a strong AWS background, and certifications such as CISA, CRISC, or CISSP.

Qualifications

• 5+ years of experience in IT governance, technology audit, information security, or IT risk management.
• Bachelor’s or Master’s degree in Computer Science, Information Systems, Cyber Security, or a related field.
• IT audit background required, AWS experience is essential.
• IT General Controls (ITGC) knowledge.
• Preferred certifications: CISA, CRISC, or CISSP.
• Solid understanding of internal audit standards, risk testing, and control validation.
• Exceptional ability to translate complex technical concepts into clear, written policy language.
• Experience implementing review and approval processes within a Secure SDLC (SSDLC), including CI/CD integration.

Skills

IT governance

IT risk management

IT audit

AWS experience

SSDLC

Policy writing

Education

Bachelor’s or Master’s degree in Computer Science, Information Systems, Cyber Security, or a related field

Job description

IT Audit/Technology Governance Specialist
Duration: Direct-hire
Location: Hybrid in Boston (on-site 3x per week)

Experience:

• 5+ years of experience in IT governance, technology audit, information security, or IT risk management
• Bachelor’s or Master’s degree in Computer Science, Information Systems, Cyber Security, or a related field
• IT audit background required, AWS experience is essential
• IT General Controls (ITGC) knowledge
• Preferred certifications: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Security Professional (CISSP)
• Solid understanding of internal audit standards, risk testing, and control validation
• Exceptional ability to translate complex technical concepts into clear, written policy language
• Strong problem-solving skills with high attention to regulatory and procedural details
• Experience implementing review and approval processes within a Secure Software Development Lifecycle (SSDLC), including use of modern fully integrated and automated processes within the CI/CD pipeline