> Markdown version of [/jobs/ext/2714686-it-governance-analyst](https://www.wearedevelopers.com/jobs/ext/2714686-it-governance-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Governance Analyst - **Company:** Tabapay, Inc. - **Location:** Palo Alto, United States - **Experience:** Experienced - **Salary:** $150,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Systems, Databases, Data Centers, DevOps, Disaster Recovery, Payment Systems, IT Management, Information Systems Security Architecture Professional, PCI Data Security Standards, Software Engineering, Cloud Platform System, Information Technology, Microservices - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/it-governance-analyst-tabapay-9372814 ## About the Role * Education: Bachelor's degree in Management Information Systems (MIS), Cybersecurity, Finance, or Computer Science. * Fintech/Banking Experience: 5 to 7 years in IT governance, risk, or compliance (GRC) inside a US financial institution, regulated payment processor, or equivalent. * Payment Domain Knowledge: At least 3 years of experience in an environment that processes high-volume US payment rails and card networks. Required Certifications (At least two preferred) * CGEIT (Certified in the Governance of Enterprise IT) * CRISC (Certified in Risk and Information Systems Control) * CISA (Certified Information Systems Auditor) * CISSP (Certified Information Systems Security Professional) Technical & Soft Skills * Regulatory Expertise: Expert-level mastery of FFIEC handbooks, PCI-DSS, and US federal banking privacy laws. * Hybrid Tech Literacy: Strong understanding of hybrid models (e.g., connecting on-prem database architecture with containerized cloud microservices). * Communication: Ability to confidently bridge the gap between fast-moving DevOps engineers and conservative corporate bank attorneys. Performance Success Metrics * Flawless US Regulatory Audits: Zero material or critical findings from the FFIEC, OCC, or external accounting auditors. * Unified Environment Controls: Successful deployment of governance policies that apply equally well to cloud infrastructure and physical servers. * Safe Velocity: Maintenance of high-throughput payment uptimes without blocking the engineering department's agile sprint schedule. ## Description Lead the development, implementation, and enforcement of IT governance frameworks across a hybrid computing environment. Balance fast-paced fintech software deployments with the rigid security and compliance rules required for high-volume US payment systems. Ensure that all IT functions of organization are continuously audit-ready with regard to US financial institution (FFIEC) audit requirements as well as Payment Card Industry (PCI) DSS requirements and System and Organization Controls (SOC) audit expectations. Core Responsibilities US Regulatory Compliance & Audit Readiness * Maintain continuous compliance with PCI-DSS v4.0 (Level 1), FFIEC guidelines, SOC 1/2, and GLBA. * Act as the lead technical liaison for US regulatory exams (e.g., OCC, Federal Reserve, FDIC, state banking/money transmission regulators). * Support regular internal audits and mock exams to identify and patch compliance gaps before official audits. Hybrid Environment Policy & Architecture Governance * Adapt IT governance frameworks (COBIT 2019, NIST CSF, CIS) to fit both on-premise/co-located servers and AWS or other cloud environments. * Govern strict data residency and sovereignty policies to keep sensitive US financial data isolated and compliant. * Enforce unified change management and secure software development lifecycle (SDLC) rules across both cloud and on-prem assets. High-Volume Transaction Environment Documentation * Identify and document technical risks or other concerns unique to high-throughput US payment rails (e.g., FedNow, ACH, Fedwire, and Real-Time Payments/RTP). * Establish separate but integrated disaster recovery (DR) and business continuity (BCP) strategies for cloud systems and physical data centers. * Facilitate vendor management processes for critical third-party IT-related vendors. Metrics, Reporting & Accountability * Design and track Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for hybrid operational stability. * Present formal risk posture and compliance updates monthly to the executive team and risk committees. * Chair the hybrid change advisory board (CAB) to safely approve complex cross-environment code deployments. ## Related Videos - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential) - [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment) - [Building the Nervous System of AI - Michael Kagan (NVIDIA)](https://www.wearedevelopers.com/videos/2133-building-the-nervous-system-of-ai-michael-kagan-nvidia) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)