Information Security Analyst – Technology Risk & Governance

Must be on W2 - No third party recruiters/sub-vending permitted

Information Security Analyst – Technology Risk & Governance

Location: Mount Laurel, NJ (Hybrid – 2 days onsite, potential for increased onsite presence)

Duration: 12-month contract (extension possible)

Overview

Our client is seeking an experienced Information Security Analyst to support technology risk and governance activities within a large enterprise environment. The successful candidate will work closely with business and technology stakeholders to manage risk assessments, monitor control gaps, and support application modernization and compliance initiatives.

Responsibilities

• Support technology risk and governance activities related to application and infrastructure modernization initiatives.
• Coordinate and maintain technology risk assessments and control gap assessments with business and technology stakeholders.
• Track risk exceptions, vulnerabilities, and remediation activities to ensure compliance with enterprise standards.
• Monitor project scope and governance requirements to ensure alignment with risk frameworks and policies.
• Prepare status reporting, dashboards, and governance updates for leadership teams.
• Participate in cross-functional meetings with business, technology, and risk teams to support ongoing initiatives.
• Identify and escalate risks, issues, and dependencies as required.

Required Qualifications

• 5+ years of experience in Information Security, Technology Risk, or Governance, Risk & Compliance (GRC).
• Experience working within a First Line of Defense (1LoD) information security or risk function.
• Hands-on experience with risk assessments and technology risk frameworks.
• Experience using governance and risk platforms such as Archer and ServiceNow.
• Strong understanding of information security controls, vulnerabilities, and remediation processes.
• Excellent organizational, communication, and stakeholder management skills.
• Ability to work independently and manage multiple priorities simultaneously.

Nice to Have

• Experience supporting application currency, technology modernization, or infrastructure lifecycle initiatives.
• Industry certifications such as CISSP, CISM, or equivalent.
• Experience within financial services or other highly regulated environments.
• Exposure to technology asset risk assessments, control gap assessments, or enterprise governance programs.