Technology Governance Associate

About the Role

The Technology Governance Associate supports the development, implementation, and ongoing operation of technology governance, risk, and compliance activities across HUB Technology & Operations. This is a hands-on, cross-functional role that works closely with Technology Governance leadership and team members to execute activities related to control framework development, control implementation, process documentation, compliance operations, and governance technology enablement. The role supports the full governance and control lifecycle, including blueprint development, discovery, gap identification, remediation tracking, evidence management, continuous monitoring, and reporting. Responsibilities will evolve based on team priorities, requiring flexibility, strong execution skills, and the ability to contribute across multiple workstreams. The primary focus of the role is supporting HUB TechOps’ IT General Controls and related technology governance activities. Familiarity with broader areas such as cybersecurity, privacy, resilience, third-party technology risk, data governance, and emerging technology governance is helpful but not required. These areas may become part of the role as business needs and team priorities evolve. The successful candidate is organized, analytical, detail-oriented, and comfortable working with multiple stakeholders to translate governance requirements into practical deliverables.

Key Responsibilities

Control Framework and Documentation Support

• Assist with developing and maintaining technology control blueprints, implementation guides, discovery workbooks, evidence schedules, standard operating procedures, and other governance deliverables.
• Support the documentation and maintenance of control objectives, control activities, execution requirements, evidence expectations, and ownership responsibilities.
• Assist with mapping relationships between risks, regulatory requirements, policies, standards, procedures, applications, and technology controls.
• Support governance activities primarily related to IT General Controls and other applicable technology risk domains.
• Identify documentation gaps, inconsistencies, and opportunities to standardize governance artifacts across technology domains.
• Support documentation quality reviews, updates, and publication activities in accordance with established framework standards.
• Apply knowledge of broader governance areas, such as cybersecurity, privacy, resilience, third-party risk, data governance, or emerging technology, when relevant to assigned work.

Control Discovery and Implementation Support

• Participate in discovery sessions with application owners, system administrators, process owners, and other technology representatives.
• Document current-state processes, control activities, roles and responsibilities, system dependencies, and supporting evidence.
• Assist with identifying gaps between existing processes and established control requirements.
• Translate discovery findings into documented implementation actions, remediation items, and follow-up activities.
• Support the development of process narratives, workflows, RACI matrices, risk assessments, and operating procedures.
• Coordinate with control owners to obtain required documentation, clarify outstanding questions, and support implementation readiness.
• Assist with assessing how changes in technology, processes, or regulatory expectations may affect existing governance, risk, control, and compliance requirements.

Compliance Operations and Continuous Monitoring

• Support ongoing control monitoring, evidence readiness, remediation tracking, and compliance reporting activities.
• Assist with maintaining evidence schedules, control inventories, ownership records, and recurring compliance calendars.
• Collect, organize, and review control documentation and evidence for completeness against established requirements.
• Support the development and maintenance of control performance metrics, KPIs, exception reporting, and monitoring dashboards.
• Assist with documenting control deficiencies, tracking corrective actions, and preparing status updates.
• Support future control self-assessment activities as the Technology Governance operating model matures.
• Support the identification of changes in regulatory expectations, industry practices, and technology risks that may require updates to governance documentation or controls.

Governance Technology and Workflow Enablement

• Support the use of approved governance, risk, and compliance platforms to manage control records, implementation workflows, gaps, remediation, evidence, and reporting.
• Assist with workflow documentation, configuration support, user acceptance testing, and process improvements under the direction of functional leads and authorized platform administrators.
• Maintain accurate control and compliance information within approved systems.
• Identify opportunities to reduce manual activities through automation, standardized workflows, and improved reporting.
• Support coordination and data consistency across approved governance platforms, SharePoint, AuditBoard (Optro), and other relevant systems.
• Assist with developing reports, dashboards, and workflow enhancements that improve visibility into control performance, remediation, and compliance obligations.

Requirements & Tech Stack

Technology Governance, Risk and Controls Knowledge

• Strong working knowledge of SOX 404, PCAOB AS 2201, ITGC control domains, NYDFS 23 NYCRR 500, SOC 2, COSO 2013, ISO 31000, COBIT, and the Three Lines Model.
• Ability to interpret established control requirements, assess operational practices, identify gaps, and support practical control implementation and remediation.

Process Analysis and Documentation

• Demonstrated ability to conduct process discovery, analyze current-state activities, and develop control blueprints, process narratives, workflows, risk assessments, and other governance deliverables.
• Strong analytical skills and attention to detail, with the ability to translate complex information into clear, actionable documentation and recommendations.

Governance Technology and Continuous Improvement

• Familiarity with GRC platforms, workflow technologies, reporting tools, and automation capabilities, with the ability to support control implementation, evidence management, remediation tracking, and continuous monitoring.
• Ability to identify opportunities to streamline governance processes, improve data quality, and reduce manual activities through standardized workflows and technology.

Stakeholder Engagement and Execution

• Strong communication and interpersonal skills, with the ability to independently engage control owners, technology teams, and governance stakeholders to gather requirements, resolve outstanding items, and drive assigned deliverables to completion.
• Demonstrated ability to manage multiple assignments, work collaboratively across functional teams, and take ownership of execution while adapting to evolving priorities and responsibilities.