Technical Governance Risk & Compliance Lead - FedRAMP High
About The Position
U.S. Bank is seeking an experienced IS Governance Risk & Compliance Lead to oversee federal compliance, audit readiness, and technology risk activities supporting critical federal programs. The role leads federal audits, Authorization to Operate (ATO) activities, regulatory compliance, and ongoing governance initiatives. It partners with Information Security, Technology, Risk, Compliance, Architecture, Infrastructure, and Cloud teams to meet federal security and regulatory requirements and maintain an audit-ready environment. The position requires federal compliance expertise, technical understanding, and the ability to lead work across multiple teams through influence, guidance, and delegation. It requires working from a U.S. Bank location three or more days per week.
Requirements
- U.S. citizenship.
- Ability to meet federal access, background screening, and clearance requirements.
- Bachelor's degree in a related field, or equivalent work experience.
- 10+ years of experience in regulatory compliance, audit, or risk management, including at least 5 years of federal audit experience with GAO or other federal entity audits.
- Experience managing or conducting vendor audits in a highly regulated industry.
Nice To Haves
- Experience supporting FedRAMP High, FISMA, NIST, and FIPS compliance requirements.
- Experience with Authorization to Operate (ATO) processes.
- Knowledge of security controls, compliance assessments, and vulnerability management.
- Understanding of technology architecture across application, database, infrastructure, cloud, and network environments.
- Experience with security tools such as Tenable, Microsoft Defender, or similar platforms.
- Experience supporting Azure and Azure Government Cloud environments.
- Strong vendor risk management and third-party compliance experience.
- Proven ability to lead through influence, delegate work effectively, and drive results across cross-functional teams.
- Professional certifications such as CISA, CISSP, CRISC, CIA, CRCM, or CGRC.
- Federal agency or government contractor experience.
Responsibilities
- Lead federal audit activities, including coordination with federal oversight agencies and internal stakeholders.
- Serve as the primary point of contact for audit requests, compliance reviews, and regulatory examinations.
- Lead audit readiness efforts, including evidence collection, documentation review, issue remediation, and control validation.
- Support Authorization to Operate (ATO) activities and ongoing federal compliance requirements.
- Partner with Information Security, Technology, Architecture, Infrastructure, and Cloud teams to maintain effective security and compliance controls.
- Oversee vendor compliance reviews and audits to ensure adherence to regulatory and risk management requirements.
- Identify compliance and control gaps and drive remediation efforts.
- Present audit findings, compliance assessments, and recommendations to technical and non-technical stakeholders.
- Provide leadership, coaching, and work direction across compliance initiatives.
Benefits
- Healthcare (medical, dental, vision).
- Basic term and optional term life insurance.
- Short-term and long-term disability.
- Pregnancy disability and parental leave.
- 401(k) and employer-funded retirement plan.
- Paid vacation (from two to five weeks depending on salary grade and tenure).
- Up to 11 paid holiday opportunities.
- Adoption assistance.
- Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law.
- Incentive and recognition programs.
- Equity stock purchase, 401(k) contribution, and pension, subject to eligibility requirements.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
