Risk & Governance Lead – Investments & Capital Markets (AI & Data Governance)

📍 Location: Hybrid – 3 days onsite in McLean, VA, Plano, TX, or New York, NY
💼 Employment Type: Full-Time | Mid-Senior Level
💲 Salary Range: $150,000 – $165,000 USD (eligible for annual incentive program)
🎁 Benefits: Comprehensive total rewards package, health coverage, retirement plan, paid time off, and professional development opportunities
🚚 Relocation: Not available
🛂 Visa Sponsorship: Not available
✈️ Travel: None

Shape the Future of AI Risk & Data Governance

Are you passionate about safeguarding the responsible use of AI and ensuring the integrity of critical financial data? This is your opportunity to step into a high-impact leadership role at the intersection of risk management, data governance, and emerging technology.

As the Risk & Governance Lead for Investments & Capital Markets, you will champion data security and compliance for AI-driven models, working closely with senior leaders, technology teams, and compliance experts. Your mission: build a governance framework that balances innovation with regulatory rigor—ensuring AI and data assets are managed ethically, securely, and strategically.

Your Impact

Partner Across the Enterprise – Work with legal, technical, and business teams to identify model data risks and influence decision-making
Drive Risk Assessments – Evaluate and mitigate risks in divisional data management and AI initiatives
Develop & Enforce Policies – Shape governance standards for model data in line with industry regulations and best practices
Champion Ethical AI – Advocate for transparency, fairness, and accountability in AI model design and use
Enhance Security – Collaborate with InfoSec teams to address vulnerabilities in model data management
Ensure Compliance – Oversee adherence to AI and data governance policies, providing guidance and oversight
Build Awareness – Lead training programs on AI ethics, data management, and risk best practices
Measure What Matters – Create KPIs, KRIs, and reporting frameworks to track governance effectiveness

What You Bring

Bachelor’s degree (or equivalent experience)
8+ years in relevant fields, including at least 6 years in operational risk management, compliance, or technology risk
Strong understanding of data management best practices and AI technologies (machine learning, NLP, large language models, computer vision)
Knowledge of regulations such as GDPR, CCPA, and industry standards (e.g., IEEE, NIST, ISO/IEC)
Proven ability to build and maintain cross-functional relationships
Exceptional communication skills—able to bridge technical and business audiences

Preferred:

2–5 years of leadership experience
Experience with model risk management in financial services
Familiarity with housing finance or capital markets

Why This Role?

💡 High-Impact Work – Influence AI governance across a major financial institution
🌐 Cross-Functional Exposure – Collaborate with leaders across legal, compliance, risk, and technology
📈 Career Development – Access to training, mentorship, and advancement opportunities
🏦 Mission-Driven Organization – Be part of a team making housing more accessible and affordable nationwide

The Ideal Candidate

You’re a risk leader with a passion for AI governance, a deep understanding of data security frameworks, and the ability to balance compliance with innovation. You think strategically, act decisively, and know how to turn complex governance requirements into actionable, enterprise-wide practices.

Technology Risk Solutions Manager
Overland Park, KS or Frisco, TX

The Technology Risk Solutions Manager is an individual contributor role within the Financial Processes and Controls team. This position is responsible for evaluating SOX and operational IT risks for organizational products and facilitating the design and implementation of technical IT controls (including IT General Controls and IT automated controls) as well as business controls to mitigate these risks. We are looking for an experienced professional to help mature the company's risk landscape, including risk governance, risk assessments for enterprise initiatives, and ongoing monitoring and reporting. The role involves collaboration with cross-functional teams, including IT, Finance, and Audit, to assess risks, develop effective control solutions, and facilitate remediation of control gaps.

Responsibilities:

Risk Management Strategy and Assessment

Identify and assess SOX and operational IT risks within complex IT and business processes, developing strategies to mitigate those risks.
Partner with IT and business leaders to design and implement IT General Controls (ITGCs), IT automated controls, and business controls to address critical risks.
Develop and implement comprehensive technology risk and control governance frameworks and standards, ensuring alignment with industry best practices and regulatory requirements.
Facilitate remediation of control deficiencies and gaps, providing leadership and guidance throughout the remediation lifecycle.
Evaluate SOC1/SOC 2 reports for third-party applications and assist in designing and implementing Complementary User Entity Controls (CUEC).
Monitor changes in regulatory requirements and emerging technologies, providing guidance on their impact on the IT and business control environment.
Train IT and business teams on the enterprise risk framework and standards.
Prepare risk reporting for review by business and IT leadership.

Project Management

Support the delivery of technology risk solutions within business processes by managing the product risk management lifecycle.
Manage the execution of control development, design, and testing activities, including coordination with internal and external auditors for new technologies.
Collaborate with cross-functional teams to identify control objectives, control activities, and control owners to mitigate IT risks.
Work with IT development teams to ensure that IT controls are integrated into system development life cycle (SDLC) processes.

Relationship and People Management

Work closely with IT and business teams to assess and monitor the effectiveness of IT and business controls, recommending enhancements where necessary.
Provide training and coaching to junior team members to support their understanding of the technology and business risk assessment process.
Manage relationships with business, IT, and audit stakeholders on large and complex cross-domain initiatives.

Qualifications:

Education:

Bachelor’s degree in Information Systems, Information Technology, Accounting, Auditing, or a related field (required).
Advanced degree or relevant certifications (e.g., CISA, CISSP) are a plus.

Work Experience:

4-7 years of experience in IT governance, risk, and compliance with a specific focus on SOX and operational risk management (required).

Knowledge, Skills, and Abilities:

Proficiency in assessing IT and business SOX and operational risks and implementing effective control solutions (required).
Strong knowledge of IT General Controls (ITGCs), IT automated controls, and business controls, including their application in financial reporting and operational processes. Familiarity with how applications, operating systems, and databases work to implement ITGCs in logical access, change management, and computer operations (required).
Excellent communication and collaboration skills, with the ability to influence stakeholders at various levels of the organization (required).
Strong analytical and problem-solving abilities, with keen attention to detail (required).
Ability to adapt to a dynamic and fast-paced environment and manage multiple priorities with urgency (required).
Knowledge of industry frameworks and standards, such as COBIT and ISO 27001 (preferred).
Experience with ongoing risk monitoring, reporting, and technology enablement tools (e.g., GRC platforms like Archer or ServiceNow) (preferred).
Understanding of cloud technologies and associated risks and controls (preferred).
Experience with agile SDLC methodologies, ERP systems, or DevOps tools (preferred).

Additional Requirements:

Must be at least 18 years old.
Legally authorized to work in the United States.

Travel Requirements:

Travel required: No

Position Classification:

DOT regulated position: No
Safety-sensitive position: No

Compensation:

Pay Range: $95,300 - $171,900 (base pay) Corporate Bonus Target: 15%

Actual pay will depend on various factors, such as location, qualifications, and experience, with starting pay falling within the provided range. Employees in eligible roles may also receive an annual bonus based on individual and/or company performance.

Benefits:

Our benefits exemplify our commitment to supporting every team member. Full- and part-time employees enjoy access to comprehensive benefits, including:

Medical, dental, and vision insurance.
Flexible spending accounts.
401(k) plan with matching.
Employee stock grants and purchase plans.
Paid time off, including up to 12 paid holidays (approximately four weeks annually for new full-time employees and 2.5 weeks for part-time employees).
Paid parental and family leave.
Family-building benefits and childcare support.
Tuition assistance and college coaching.
Short- and long-term disability coverage.
Voluntary insurance options (life, AD&D, accident, and long-term care).
Mobile service and home internet discounts.
Access to commuter and transit programs.

Professional Growth:

We are committed to fostering a workplace culture that promotes career growth. Employees have access to a wide range of opportunities to develop their skills and advance in their careers. By applying for this role, you are taking the next step toward achieving your career goals with an organization that values your potential.

Equal Opportunity Employer:

Our organization is an Equal Opportunity Employer. Employment decisions are made without regard to age, race, ethnicity, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, marital status, citizenship status, veteran status, disability, or any other status protected by law. Discrimination, retaliation, or harassment based on any of these factors will not be tolerated.

If you require reasonable accommodation during the application or interview process, please let us know.

Your new job awaits.