Cyber Security Governance Analyst (Variance Review – AppSec)

To Apply for this Job Click Here

Job Summary:
The Analyst will support the AI-Ready Cyber Resilience program by ensuring all security variances (IT50.06, S09, S02) are properly documented, formatted, and compliant with enterprise standards prior to approval. This role acts as a quality gate within the Cyber Application & Cloud Defense team—improving consistency, audit readiness, and efficiency in variance handling.
Top 3 Priorities in First 90 Days:

1. Establish consistent quality control for IT50.06, S09, and S02 variance submissions (format, completeness, accuracy).
2. Improve turnaround time and quality of variance submissions through direct engagement with application teams.
3. Support initial review process and potentially take ownership of basic reviews and ServiceNow exception rule creation.

Required Skills (Must-Haves)

• 3-6 years experience, mid-level analyst / admin
• Strong organizational and process-oriented mindset (managing multiple variance submissions)
• Clear and proactive communication skills (working directly with app teams and reviewers)
• Attention to detail (ensuring adherence to required formats and completeness)
• Basic understanding of application security vulnerabilities (training acceptable)
• Experience working in structured workflows or governance processes
• Ability to follow defined standards and enforce consistency
• Financial institution or regulated enterprise environment

Nice-to-Have Skills

• Familiarity with IT50.06, S09, S02 or similar risk/variance frameworks
• Experience with ServiceNow (especially creating or managing exception rules)
• Exposure to application vulnerability management or AppSec processes
• Experience supporting audit/compliance or governance workflows
• Knowledge of container security or Prisma Cloud

Ideal Background

• Cybersecurity governance, risk, or compliance analyst
• IT risk or audit support roles within banking or regulated industries
• PMO / operations analyst in cybersecurity programs
• Consulting experience supporting enterprise risk or cyber governance initiatives

To Apply for this Job Click Here