IS Governance Risk & Compliance Lead
About The Position
U.S. Bank is seeking an experienced IS Governance Risk & Compliance Lead to oversee federal compliance, audit readiness, and technology risk activities supporting critical federal programs. This role serves as a key compliance leader responsible for federal audits, Authorization to Operate (ATO) activities, regulatory compliance, and ongoing governance initiatives. The successful candidate will partner with Information Security, Technology, Risk, Compliance, and Architecture teams to ensure adherence to federal security and regulatory requirements while maintaining a strong audit-ready environment. This position requires a combination of federal compliance expertise, technical understanding, and the ability to lead work across multiple teams through influence, guidance, and delegation.
Requirements
- U.S. Citizenship required.
- Ability to meet federal access, background screening, and clearance requirements.
- Bachelor's degree in a related field, or equivalent work experience.
- 10+ years of experience in regulatory compliance, audit, or risk management, with at least 5 years of federal audit experience including GAO or other federal entity audits.
- Experience managing or conducting vendor audits in a highly regulated industry.
Nice To Haves
- Experience supporting FedRAMP High, FISMA, NIST, and FIPS compliance requirements.
- Experience with Authorization to Operate (ATO) processes.
- Knowledge of security controls, compliance assessments, and vulnerability management.
- Understanding of technology architecture across application, database, infrastructure, cloud, and network environments.
- Experience with security tools such as Tenable, Microsoft Defender, or similar platforms.
- Experience supporting Azure and Azure Government Cloud environments.
- Strong vendor risk management and third-party compliance experience.
- Proven ability to lead through influence, delegate work effectively, and drive results across cross-functional teams.
- Professional certifications such as CISA, CISSP, CRISC, CIA, CRCM, or CGRC preferred.
- Federal agency or government contractor experience preferred.
Responsibilities
- Lead federal audit activities, including coordination with federal oversight agencies and internal stakeholders.
- Serve as the primary point of contact for audit requests, compliance reviews, and regulatory examinations.
- Lead audit readiness efforts, including evidence collection, documentation review, issue remediation, and control validation.
- Support Authorization to Operate (ATO) activities and ongoing federal compliance requirements.
- Partner with Information Security, Technology, Architecture, Infrastructure, and Cloud teams to maintain effective security and compliance controls.
- Oversee vendor compliance reviews and audits to ensure adherence to regulatory and risk management requirements.
- Identify compliance and control gaps and drive remediation efforts.
- Present audit findings, compliance assessments, and recommendations to technical and non-technical stakeholders.
- Provide leadership, coaching, and work direction across compliance initiatives.
Benefits
- Healthcare (medical, dental, vision)
- Basic term and optional term life insurance
- Short-term and long-term disability
- Pregnancy disability and parental leave
- 401(k) and employer-funded retirement plan
- Paid vacation (from two to five weeks depending on salary grade and tenure)
- Up to 11 paid holiday opportunities
- Adoption assistance
- Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
Associate degree
