IT Application & Governance Engineer

About the role

The IT Application & Governance Engineer will design, develop, and maintain enterprise applications while ensuring they meet architectural standards and governance requirements. This role acts as the technical bridge between developers, infrastructure, security, vendors, and auditors.

Key responsibilities

• Design, develop, and enhance custom and internal enterprise applications in line with approved architectures.
• Provide technical governance over codebases, enforcing coding standards, version control, and secure development practices.
• Define and manage application lifecycle controls from design approval through retirement.
• Lead change and release management to ensure controlled, traceable deployments.
• Conduct code reviews, quality assurance checks, and technical risk assessments for both internally developed and vendor‑delivered applications.
• Support system integrations, APIs, and data exchanges across enterprise applications.
• Embed data protection, security, and internal control requirements within applications.
• Lead incident and problem management at the application level, including debugging and root‑cause analysis.
• Maintain comprehensive technical and governance documentation, including architecture diagrams and control evidence.

Required profile

• Proven experience overseeing the full application lifecycle for enterprise solutions.
• Strong understanding of IT governance frameworks and ability to implement application‑level controls.
• Experience with compliance and risk management, including SOX‑relevant controls and data protection.
• Hands‑on background in change and configuration management for applications.
• Ability to work collaboratively with development, infrastructure, security, and audit teams.

Required skills

• Application lifecycle management
• Enterprise‑grade programming languages and frameworks
• Version control systems (e.g., Git)
• CI/CD pipeline implementation
• Secure coding standards
• API development and middleware integration
• IT governance frameworks
• Compliance and risk control implementation (SOX, data protection)
• Change and configuration management