Sr Technology Governance Analyst

Senior Technology Governance Analyst

Want to shape how a leading organization manages technology risk and controls? Are you excited to work at the intersection of process and data? Step into a role where your risk and control expertise turns into real, visible change across the business.

This is a fully remote role based in the United States, with the flexibility to work virtually.

Aon is in the business of better decisions

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world. As an organization, we are united through trust as one inclusive team, and we are passionate about helping our colleagues and clients succeed.

What the day will look like

In this role, you'll help shape how technology work is organized, monitored, and improved across the organization. You'll partner with technology teams and key stakeholders to bring structure, clarity, and transparency to how we manage risk, support audits, and enhance our ways of working.

On a typical day, you will:

• Modify and maintain a central library of technology controls, ensuring they are clearly defined, aligned to key risks and requirements, and applied consistently across systems and processes.
• Work with control owners and technology teams to review how controls are designed and how they operate, and suggest improvements where needed to reduce risk.
• Collaborate with internal audit and other collaborators on planning, evidence needs, and followup items to help keep risk, control, and audit activities coordinated.
• Develop and deliver communications and training to help teams understand and apply risk and control processes in a consistent way.
• Build and maintain reporting on risks, controls, and followup actions, including clear summaries and visuals tailored to different collaborator needs.
• Use experience in risk and/or technology risk management to provide practical input on control design, risk assessment, and remediation approaches.
• Identify and prioritize process pain points and help design practical, repeatable process improvements.

How this opportunity is different

In this role, you'll sit at the center of technology and risk, helping shape how controls are defined, implemented, and communicated across the organization. Rather than operating in a narrow functional lane, you'll influence end-to-end risk and control practices and how they're shared with key partners.

• Shape the control environment, not just execute it - You won't simply follow a pre-defined playbook; you'll help design and refine the technology control library, influence how controls are applied, and directly support how risk is managed across the organization.
• Own clear, practical reporting - This role is responsible for creating and maintaining reporting and dashboards on risk and control health, giving teams straightforward insight into where things are working well and where attention is needed.
• Bridge between technology and risk partners - You will work across technology teams and control owners-coordinating activities, aligning expectations, and helping everyone work from a single, consistent view of risks and controls.
• End-to-end view of the risk lifecycle - From control design and assessment, through issue management and remediation, to reporting and ongoing improvements, you'll see and support the full lifecycle rather than a narrow slice.
• Opportunity to build scalable ways of working - You'll help develop and refine standard templates, processes, and reporting that can scale as the organization grows, creating simple, repeatable ways of working.
• Blend of strategic and hands-on work - The role combines input into how risks and controls are designed with day-to-day ownership of processes, communications, and reporting-suited to someone who enjoys both planning and execution.

Skills and experience that will lead to success

• Experience in technology risk management, IT controls, internal audit, or a related GRC function.
• Working knowledge of common technology controls (e.g., access management, change management, backup/recovery, SDLC) and how they show up in risk processes.
• Experience supporting internal or external audits (e.g., walkthroughs, coordinating evidence requests, responding to findings, tracking remediation activities).
• Strong analytical skills with the ability to identify process/control gaps and recommend practical improvements.
• Experience building or maintaining reports or dashboards, including summarizing key insights for senior audiences.
• Clear written and verbal communication skills; able to translate technical and risk concepts into plain actionable language.
• Demonstrated ability to manage multiple tasks, partners, and deadlines with strong attention to detail and followthrough.
• Familiarity with GRC tools (e.g., ServiceNow) and frameworks such as SOC 2, ISO 27001, COBIT or NIST

Education

Bachelor's degree in Business, Information Systems, Risk/Compliance, or related field; or equivalent work experience.

For positions in San Francisco and Los Angeles, we will consider for employment qualified applicants with arrest and conviction record in accordance with local Fair Chance ordinances.

Aon is not accepting unsolicited resumes from search firms for this position. If you are a search firm, you will not be compensated in any way for your submission of a candidate, even if Aon hires that candidate.

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.

The salary range for this position (intended for U.S. applicants) is [$93500 to $130000] annually. The actual salary will vary based on applicant's education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on applicant's geographic location.

This position is eligible to participate in one of Aon's annual incentive plans to receive an annual discretionary bonus in addition to base salary. The amount of any bonus varies and is subject to the terms and conditions of the applicable incentive plan.

A summary of all the benefits offered for this position:

Aon offers a comprehensive package of benefits for full-time and regular part-time colleagues, including, but not limited to: a 401(k) savings plan with employer contributions; an employee stock purchase plan; consideration for long-term incentive awards at Aon's discretion; medical, dental and vision insurance, various types of leaves of absence, paid time off, including 12 paid holidays throughout the calendar year, 15 days of paid vacation per year, paid sick leave as provided under state and local paid sick leave laws, short-term disability and optional long-term disability, health savings account, health care and dependent care reimbursement accounts, employee and dependent life insurance and supplemental life and AD&D insurance; optional personal insurance policies, adoption assistance, tuition assistance, commuter benefits, and an employee assistance program that includes free counseling sessions. Eligibility for benefits is governed by the applicable plan documents and policies.

#LI-NS1

#LI-REMOTE