Technology Governance Lead

You’ll help establish repeatable processes for identifying technologies adopted across the organization, assessing risk, and improving visibility into the technology ecosystem. You’ll work closely with Security, IT, Enterprise Architecture, Procurement, Privacy, Legal, and business stakeholders to enable secure technology adoption while supporting governance across the technology lifecycle. What You’ll Do

• Build processes that improve visibility into SaaS applications, cloud services, AI platforms, browser extensions, and other business-adopted technologies
• Analyze telemetry from identity, endpoint, cloud, network, browser, and security platforms to identify technologies outside established governance processes
• Investigate technology usage to determine business purpose, ownership, data sensitivity, regulatory considerations, and security risk
• Partner with business stakeholders to guide secure onboarding into operational processes
• Maintain inventories of applications, technology owners, integrations, and risk data
• Perform technical risk assessments and recommend practical security controls
• Build automation using scripting, APIs, and workflow tools to improve discovery, inventory, and reporting
• Produce reporting that communicates technology adoption trends and risk to stakeholders

• 5+ years in cybersecurity, security engineering, cloud security, technology governance, or a related field (flexible for strong candidates with clearly demonstrated hands-on experience)
• Background in security engineering, SOC, IT audit, or risk management
• Automation/scripting experience - language agnostic (Python, Java, C++, etc.), with the ability to translate a manual process into an automated workflow is a big plus
• Familiarity with vulnerability management, endpoint discovery, and cloud discovery/identification tools
• CISSP preferred, not required; other cloud or security certifications a plus (CCSP, Security+, GIAC, IAM certs)
• Strong communication skills and the ability to work independently within a defined timeline