Senior Governance Analyst

Senior Governance Analyst (Contract)

Hybrid | Boston, MA (In-office Tuesday–Thursday)

Contract - 6-12 months duration

Please reach out to Chris McMillan at cmcmillan@alexandertg.com if you are interested in the role.

We're seeking a Senior Governance Analyst to help strengthen our IT governance, technology lifecycle management, and risk/compliance programs. This role will partner across Infrastructure, Information Security, Enterprise Risk, and Audit to ensure technology standards, policies, and asset management processes align with industry best practices and regulatory requirements.

Responsibilities

• Develop, maintain, and improve IT policies, standards, and governance processes.
• Align technology governance with NIST, ISO 27001, COBIT, and ITIL frameworks.
• Manage the lifecycle of enterprise hardware, software, and technology assets.
• Maintain software and hardware asset inventories (CMDB/SAM) and coordinate technology upgrades and retirements.
• Conduct technology risk assessments and partner with Information Security on risk mitigation initiatives.
• Support internal and external technology audits by coordinating evidence, tracking findings, and driving remediation efforts.
• Assist with identity and access governance, including periodic access reviews and role/profile management.
• Partner with Engineering, Finance, Vendor Management, and Enterprise Risk to improve governance and operational processes.
  
  

Qualifications

• 5–8 years of experience in IT Governance, IT Risk, Information Security, or Technology Audit.
• Experience with governance frameworks including NIST, ISO 27001, COBIT, and ITIL.
• Hands-on experience with ServiceNow, Jira, Flexera, or similar ITSM/ITAM platforms.
• Strong understanding of technology risk, controls, audit readiness, and compliance.
• Experience supporting Secure Software Development Lifecycle (SSDLC) and CI/CD governance.
• Excellent communication skills with the ability to translate technical concepts into policies and procedures.
• CISA, CRISC, or CISSP certifications are preferred.
  
  

Please reach out to Chris McMillan at cmcmillan@alexandertg.com if you meet the qualification and interested in the role.