Job Summary
Under the supervision of the Vice President of Information Technology, the Senior Analyst, Technology Governance & Controls is responsible for strengthening CGC’s enterprise technology governance framework, internal control environment, and operational risk posture. This role helps ensure that technology-related processes, system access models, vendor relationships, documentation standards, and change practices align with organizational expectations for accountability, audit readiness, and institutional durability. 

The Senior Analyst serves as a key internal resource for access governance, control evidence management, policy administration, risk tracking, vendor oversight support, continuity planning coordination, and governance reporting. This position translates governance expectations into practical, repeatable operating disciplines that support secure and efficient business execution. 

This role is well suited for a proactive professional who can operate effectively in a growing and evolving organization, bring structure where processes continue to mature, and execute with sound judgment, discretion, and a high degree of ownership. Success in this position requires collaboration, professionalism, strong written communication, and the ability to improve how work gets done through practical use of automation, AI tools, and modern workflow capabilities. This role is central to CGC's enterprise governance maturity, maintaining the frameworks, processes, and controls that allow IT systems, data, and vendors to operate with accountability and discipline.

Key Responsibilities

• Support CGC’s enterprise technology governance and control environment through disciplined administration of repeatable oversight processes. 
• Coordinate periodic user access reviews, entitlement recertifications, segregation-of-duties support reviews, and permission validation activities across enterprise systems.
• Maintain repositories of control evidence, approvals, documentation, and artifacts required for audits, internal reviews, external assessments, or regulatory inquiries.
• Administer the lifecycle of technology-related policies, standards, and procedures, including version control, review schedules, approvals, acknowledgments, and publication tracking.
• Support vendor governance and third-party risk management processes, including intake coordination, due diligence documentation, contract control support, and remediation follow-up.
• Maintain governance logs and trackers related to risks, issues, exceptions, incidents, remediation items, and management action plans.
• Administer and monitor the technology change management process including ticket completeness, approval validation, testing evidence review, and record retention within the Technology Service Desk in Jira.
• Coordinate business continuity and disaster recovery governance activities, including inventories, documentation updates, exercise support, and remediation tracking.
• Prepare dashboards, reports, metrics, and presentations related to governance performance, access controls, training completion, vendor reviews, policy status, and control maturity, including PowerBI reporting where applicable.
• Assist in administration of security awareness initiatives, policy acknowledgments, phishing simulations, and workforce education programs.
• Identify opportunities to streamline governance processes through workflow automation, AI-enabled productivity tools, agentic workflows, and improved operating procedures consistent with internal control expectations.
• Partner with Finance, Legal, Risk, Operations, and business stakeholders to improve enterprise accountability and governance practices.
• Handle sensitive information with discretion and professionalism, escalating concerns appropriately.
• Operate with a high degree of ownership, reliability, and judgment in a dynamic environment with evolving priorities.
• Perform other duties as assigned in support of CGC’s mission and operational needs.

Required Skills and Abilities

• Experience in governance, internal controls, risk management, audit support, compliance operations, technology administration, or related business operations environments.
• Demonstrated experience managing documentation, evidence, approvals, trackers, or structured operational processes with strong attention to detail.
• Familiarity with access governance concepts, role-based permissions, and enterprise system control practices.
• Strong organizational skills with the ability to manage multiple priorities and deadlines.
• Excellent written communication and presentation skills.
• Demonstrated ability to operate effectively in evolving environments with changing priorities and developing processes.
• Proven professionalism, discretion, and sound judgment when handling confidential or sensitive matters.
• Demonstrated digital fluency and ability to quickly learn modern platforms and emerging technologies.

Education and Experience

• Bachelor’s degree and 5+ years of directly related experience, or equivalent combination of education and experience.
• Experience supporting technology within financial services, nonprofit, startup, federally funded, or regulated environments.
• Familiarity with frameworks such as COSO, NIST, SOC, ISO 27001, or similar governance/control standards.
• Experience with enterprise platforms such as Vanta, Microsoft 365, PowerBI, Entra ID, Jira, Confluence, Box, NetSuite, Salesforce, or comparable systems.
• Experience supporting vendor management, procurement controls, contract administration, or third-party risk processes.
• Familiarity with workflow automation tools, AI productivity tools, prompt engineering, and emerging agentic workflow concepts.
• Certifications such as CISA, CRISC, Security+, ITIL, PMP, Lean Six Sigma, or similar credentials are a plus.

Compensation and Benefits

• The salary range for the Senior Analyst position is between $117,715.00 – $132,549.00 annually.
• Senior Analyst will be eligible for an annual bonus based on job and organizational performance.
• The benefits offered for the Senior Analyst include health insurance, 401k, vacation leave and sick leave.

ABOUT THE TEAM

Anduril's Detection and Response team is looking for a Security Operations Analyst to be the watchtower for Anduril's critical defense technologies. As a SecOps Analyst on the detection and response team, you'll be responsible for monitoring and responding to adversarial activity while helping incorporate key detection feedback loops with the detection engineering team. As a Senior SecOps Analyst, you will serve as an incident commander alongside other senior analysts. When not responding to threats, you'll be asking questions of our data sets, conducting threat hunting and data normalization operations across the organization to understand user behavior and identify anomalies. 

WHAT YOU'LL DO

• Triage and respond to alerts / incidents covering multiple disciplines including, but not limited to, phishing, endpoints, cloud infrastructure and services, and SaaS applications
• Build and optimize tailored detection signatures, response playbooks, and response automation using detection-as-code principles
• As the frontline of DNR, you will lead the feedback loop for detections, ensuring alerts are fine tuned to reduce false positives
• Participate in threat modeling scenarios with cross-functional partners to understand weaknesses across Cloud, Mobile, Endpoints, and other environments incorporating findings into security controls and/or detection signatures
• Organize and conduct threat hunting and data baselines to identify anomalous patterns in data
• Participate in an on-call rotation responding to security events and conducting incident response investigations while effectively communicating findings to key stakeholders. As a Senior SecOps Analyst, you will serve as an incident commander as necessary.
• Proactively collaborate with a wide range of stakeholders, guiding detection and response maturity of key worlds, leading incidents and large-scale data baselines, and being responsible with mentoring and guiding junior analysts.

REQUIRED QUALIFICATIONS

• Experience in security monitoring, log analysis, and detection engineering within large data sets across endpoint, network, and a wide variety of application log sources
• Experience in Python development, specifically contributing to a shared codebase used for automating SOC operations
• Must have experience with one or more SIEM languages (SPL, KQL, SQL)
• Experience conducting analysis in a data lake environment
• Broad range of practical security knowledge across the spectrum of endpoint, network, identity, application, and cloud infrastructure
• Knowledge of attacker tactics, techniques, and procedures (TTPs) across Windows, Linux, MacOS, AWS/Azure, etc.
• Strong communication skills and experience collaborating with internal and external stakeholders
• Must be able to obtain and hold a U.S. Top Secret security clearance

PREFERRED QUALIFICATIONS

• Experience conducting incident response in the Cloud (AWS, Azure, GCP)
• Digital Forensics and/or reverse engineering experience is a plus!