risk and compliance manager

Little Caesars Pizza

<div>
 
 Build a Bigger, Better, Bolder Future
 
 
 
 Imagine working for a company that measures its success based off the growth of its colleagues, a company that invests in its future by investing in you. Little Caesars is a company where our colleagues make an impact.
 
 
 
 Your Mission
 
 
 
 The Cybersecurity Governance, Risk, and Compliance Manager will drive and manage the enterprise-wide Governance, Risk, and Compliance capabilities regarding information management, risk management, policies &amp; standards, and internal/external compliance. The manager will lead a team that will design, develop, document, and communicate Governance, Risk, and Compliance related policies, standards, and procedures and is a key enabler in driving consistency across LCE. More specifically, the Governance, Risk, and Compliance Manager will be responsible for the design and development of robust operational capabilities in support of risk management (including third parties), compliance, and security training and awareness.
 
 
 In this role, the Manager will also offer guidance, consultations, and decision support for ad hoc requests and inquiries. The Manager will oversee the enterprise-wide Governance, Risk, and Compliance function to ensure key compliance metrics and reports are consistently generated, aggregated, and reported to senior management and other executive stakeholders.
 
 
 This position must be able to work on the development of a cybersecurity risk framework, implantation of policies, and security awareness program, as well as identifying and monitoring security compliance requirements. This position will interface with all levels of the organization and have access to security-sensitive information.
 
 
 
 How You&rsquo;ll Make An Impact
 
 
 
 <ul>
 <li>
 Drive compliance leadership and engagement with the stakeholder operations teams to ensure the timely identification of cyber risk across markets as well as compliance with all appropriate regulatory requirements and internal cybersecurity policies and standards
 </li>
 <li>
 Develop and implement a cybersecurity risk assessment framework/methodology, standards, guidelines, and procedures with KPIs and coordinate the assessment across all business verticals
 </li>
 <li>
 Develop and oversee the adoption of a global cybersecurity policies and standards framework. In addition, ensure these global policies and standards (and any exceptions to them) are maintained current and relevant, and appropriately managed over their lifecycle
 </li>
 <li>
 Collaborate with Legal and Corporate Data Protection functions in the interpretation of regulatory requirements and compliance expectations, and ensure cybersecurity and regulatory requirements are properly addressed in third party contracts
 </li>
 <li>
 Lead the development of a high-value asset framework, information management controls to drive the proper application of security controls in a manner that is commensurate with the associated risks
 </li>
 <li>
 Lead the development of and oversee a global cybersecurity training, education, and awareness program
 </li>
 <li>
 Lead a strong team of professionals assigned to major initiatives ensuring dependable and responsive support to the organization
 </li>
 <li>
 Maintaining up-to-date, detailed knowledge of the IT security industry including awareness of new or improved security solutions and policies, processes, and procedures. Share and educate colleagues to mature the organization
 </li>
 <li>
 Develop and manage compliance metrics within the governance risk and compliance system, and report on the effectiveness of governance and compliance activities by collecting and aggregated key risk and compliance metrics
 </li>
 <li>
 Responsible for hiring, training, performance management, and corrective actions for direct reports. Collaborate with team members on career development and goal setting
 
 
 </li>
 </ul>
 
 Who You Are
 
 
 
 <ul>
 <li>
 Bachelors&rsquo; degree in Information Management, Information Security, Computer Engineering, Computer Science, or other closely related disciplines. Equivalent experience may be considered in lieu of a formal degree
 </li>
 <li>
 Minimum of seven (7) years of experience in cybersecurity related functions, risk management, audit, risk assurance, compliance, or similar area
 </li>
 <li>
 Minimum of four (4) years of progressive experience leading and managing a team building custom technical solutions and implementing third-party products is required
 </li>
 <li>
 Extensive cybersecurity governance, risk management, and compliance leadership experience in a large complex business organization
 </li>
 <li>
 Detailed working knowledge and prior experience in building and maintaining risk management framework, risk management processes, and associated reporting models
 </li>
 <li>
 Experience developing and implementing third-party risk management frameworks and processes
 </li>
 <li>
 Experience and familiarity with cloud data security and working with public cloud solutions
 </li>
 <li>
 Experience working with a Governance Risk and Compliance tool
 </li>
 <li>
 Experience identifying, evaluating, and managing risk in a complex and changing global environment
 </li>
 <li>
 Experience developing or leading impactful cybersecurity awareness materials and campaigns at a global level
 </li>
 <li>
 Prior experience developing security standards and policies and discerning and designing an organization&rsquo;s protection needs (i.e. security controls) for information systems and networks
 </li>
 <li>
 Experience with asset management
 </li>
 <li>
 Demonstrated ability to prioritize and execute tasks in a high-pressure environment
 </li>
 <li>
 Requires self-motivated approach to work with keen attention to detail
 </li>
 <li>
 A proactive goal achiever who innovates to go above and beyond expectations to get the job done and is comfortable working in a fast-paced, dynamic environment
 </li>
 <li>
 At least one of the following certifications is required or must be obtained within your first 12 months of employment: CISA, CISM, CRISC, or CISSP
 </li>
 <li>
 Deep understanding of cybersecurity and the relationship between threat, vulnerability, and information value in the context of governance, compliance, and risk management preferred.
 </li>
 <li>
 Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security tools and procedures preferred.
 </li>
 <li>
 An understanding of emerging technology and digital trends and their impacts on cybersecurity preferred.
 </li>
 <li>
 High proficiency with common cybersecurity management frameworks, regulatory requirements, and industry leading practices
 </li>
 <li>
 Strong knowledge of third-party management leading practices and the potential cybersecurity risks involved in third-party relationships
 </li>
 <li>
 Strong knowledge of organizational training and education policies, processes, and procedures
 </li>
 <li>
 Deep understanding of risk-based decision-making (i.e. risk analysis, mitigation, resolution, acceptance, etc.)
 </li>
 <li>
 Experience with technical documentation related to PCI DSS, ISO 27001, NIST, SOC 2 and continuous monitoring
 </li>
 <li>
 Demonstrate strong verbal and written communication skills as well as strong analytical and problem-solving abilities
 </li>
 <li>
 Strong process design, time management and organizational skills
 </li>
 <li>
 Strong work ethic, leadership skills, initiative, and ownership of work
 </li>
 <li>
 Proven ability to build consensus and support across the organization
 </li>
 <li>
 Proven ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means
 
 
 </li>
 </ul>
 
 Where You&rsquo;ll Work
 
 
 
 <ul>
 <li>
 A state-of-the-art building with a modern-day, open environment in the heart of The District Detroit.
 </li>
 <li>
 A colleague fitness center, work caf&eacute; and an outdoor patio with grills.
 </li>
 <li>
 Over 60 different meeting spaces to help promote a collaborative environment.
 
 
 </li>
 </ul>
 
 
 All items listed above are illustrative and not comprehensive. They are not contractual in nature and are subject to change at the discretion of Little Caesars Enterprises Inc.
 
 
 
 
 
 Little Caesar Enterprises, Inc. is an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without regards to that individual&rsquo;s race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender identity, age, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law.
 
 
 The Company will strive to provide reasonable accommodations to permit qualified applicants who have a need for an accommodation to participate in the hiring process (e.g., accommodations for a job interview) if so requested.
 
 
 This company participates in E-Verify. Click on any of the links below to view or print the full poster.
 
 
 E-Verify and Right to Work.
 
 
 
 
 PRIVACY POLICY
 
</div>

Cybersecurity Governance, Risk and Compliance Manager

Decagon

<div>About Decagon
Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences.
Our technology enables industry-defining enterprises like Avis Budget Group, Block&rsquo;s Cash App and Square, Chime, Oura Health, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel.
We&rsquo;re building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships. We&rsquo;re proud to be backed by world-class investors who share that vision, including a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures, along with many others.
We&rsquo;re an in-office company, driven by a shared commitment to excellence and velocity. Our values &mdash; Just Get It Done, Invent What Customers Want, Winner&rsquo;s Mindset, and The Polymath Principle &mdash; shape how we work and grow as a team.<h2 class="jobSectionHeader">
About the Team</h2>
The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with complete trust while defending against sophisticated, AI-enabled threats at massive scale.
Our mission is to secure magical support experiences, ensuring that AI agents and human agents can collaborate safely to help users resolve their issues while maintaining the highest standards of security and privacy.<h2 class="jobSectionHeader">
About the Role</h2>
Join Decagon as a Compliance Manager and play a critical role in securing customer trust as we scale to serve Fortune 500 and international enterprises. Working closely with the head of security and compliance, you'll be responsible for the day-to-day execution of our compliance program and customer security engagements. This is a high-impact role where you'll directly contribute to closing enterprise deals by efficiently managing security communications with customers, supporting compliance audits, and improving our security documentation. Perfect for someone who thrives in a high impact organization with attention to detail, excellent writing skills, and who wants to build expertise in enterprise AI compliance.<h2 class="jobSectionHeader">
In this role, you will</h2><ul><li>
Drive compliance certifications including SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and CCPA</li><li>
Automate or execute compliance evidence collection, ensuring all controls are properly documented and audit-ready</li><li>
Maintain and improve security documentation including policies, procedures, and customer-facing security collateral</li><li>
Support customer security assessments by preparing materials for security reviews and helping address technical inquiries from Fortune 500 security teams</li><li>
Manage security and compliance topics in RFPs end-to-end, coordinating responses across engineering, product, and legal teams to deliver accurate, timely responses to enterprise customers.</li><li>
Coordinate with contractors and vendors to maintain response quality and meet timelines during peak sales periods</li><li>
Build and optimize repeatable processes to scale our GRC operations to hundreds of enterprise customers</li><li>
Partner with sales engineering to understand customer security requirements and proactively prepare responses for common concerns</li><li>
Partner with Sales and Customer Success to accelerate deal velocity by proactively addressing customer security concerns with published content</li><li>
Collaborate with Security, Engineering, and Product teams to translate compliance requirements into actionable technical controls and ensure new features meet regulatory standards</li><li>
Establish vendor risk management programs to assess and monitor third-party security risks across our supply chain</li></ul><h2 class="jobSectionHeader">
Your background looks something like this</h2><ul><li>
3-5 years of GRC experience in high-growth SaaS or technology companies, with direct responsibility for compliance programs</li><li>
Proven track record successfully contributing to SOC 2, ISO 27001, or similar enterprise compliance certifications</li><li>
Experience in data privacy regulations including CCPA, GDPR, and emerging AI governance frameworks</li><li>
Strong project management skills with ability to coordinate cross-functional teams under tight deadlines</li><li>
Excellent written and verbal communication skills to translate complex security concepts for diverse audiences</li><li>
Working knowledge of technical security controls and ability to collaborate effectively with engineering teams</li></ul><h2 class="jobSectionHeader">
Even better if you have</h2><ul><li>
Experience with AI/ML compliance frameworks and understanding of unique risks in conversational AI systems</li><li>
Background in healthcare or financial services with knowledge of HIPAA or PCI requirements</li><li>
Track record of building GRC programs at companies scaling from startup to enterprise</li><li>
Experience with GRC platforms like Vanta, Drata, or SecureFrame to automate compliance workflows</li><li>
Understanding of cloud security particularly Google Cloud Platform compliance and security features</li></ul><h2 class="jobSectionHeader">
Compensation</h2>
$190K &ndash; $275K + Offers Equity
Benefits
We proudly offer the following benefits for our full-time employees:<ul><li>
Take what you need vacation policy</li><li>
Medical, Dental, and Vision benefits for you and your family</li><li>
Life Insurance and Disability Benefits</li><li>
Retirement Plan (e.g., 401K, pension)</li><li>
Parental Leave</li><li>
Fertility and family building benefits through Carrot</li><li>
Daily lunches and snacks in the office to keep you at your best</li></ul>
These benefits are described in more detail in Decagon&rsquo;s policies, may vary by location, and can change at any time according to applicable compensation and benefits plans.
Compensation Range: $190K - $275K</div>

Governance, Risk, and Compliance Manager

Stellar Hunters

<div><h4 class="jobSectionHeader">Job Summary</h4>
We are seeking a Cyber GRC Manager to lead and mature the company&rsquo;s cyber governance, risk, and compliance (GRC) program. The successful candidate will partner with Security, IT, Legal, Risk, and business stakeholders to design, implement, and operate controls, policies, and risk management practices that reduce cyber risk and support business objectives. This role will own compliance initiatives, third-party risk assessments, policy lifecycle management, and metrics to drive continuous improvement across the organization.<h4 class="jobSectionHeader">
Key Responsibilities</h4><h5 class="jobSectionHeader">
GRC Strategy &amp; Program Leadership</h5><ul><li>
Develop and evolve a risk-based cyber GRC strategy that aligns with enterprise risk appetite and business priorities.</li><li>
Lead the GRC program, including governance forums, risk assessment cadence, control frameworks, and remediation tracking.</li><li>
Partner with senior leadership to translate regulatory and business requirements into practical program objectives and roadmaps.</li></ul><h5 class="jobSectionHeader">
Policy, Standards &amp; Control Management</h5><ul><li>
Maintain and enhance information security policies, standards, and procedures; ensure clear ownership and version control across the policy lifecycle.</li><li>
Define and maintain control objectives mapped to frameworks (e.g., NIST CSF, ISO 27001, SOC 2) and ensure consistent implementation across teams.</li><li>
Coordinate control testing, assessments, and remediation activities with internal teams and external assessors.</li></ul><h5 class="jobSectionHeader">
Risk Assessment &amp; Third-Party Risk Management</h5><ul><li>
Conduct enterprise and technology risk assessments; identify, evaluate, and prioritize cyber risks and mitigation plans.</li><li>
Own third-party risk management processes including vendor risk assessments, due diligence, contract security requirements, and ongoing monitoring.</li><li>
Work with procurement and vendor owners to remediate deficiencies and reduce supply chain risk.</li></ul><h5 class="jobSectionHeader">
Compliance &amp; Audit Support</h5><ul><li>
Manage compliance programs and readiness for relevant regulations and standards (e.g., SOC 2, ISO 27001, GDPR, HIPAA where applicable).</li><li>
Act as primary liaison for internal and external audits, prepare evidence and reporting, and coordinate remediation activities.</li><li>
Maintain documentation and continuous evidence of controls to support attestations and regulatory reporting.</li></ul><h5 class="jobSectionHeader">
Metrics, Reporting &amp; Continuous Improvement</h5><ul><li>
Define and report GRC metrics and dashboards (e.g., risk posture, control maturity, remediation timelines, vendor risk status) to leadership and stakeholders.</li><li>
Use data and trend analysis to identify program gaps, recommend improvements, and measure the effectiveness of risk reduction efforts.</li><li>
Develop and maintain GRC playbooks, runbooks, and process documentation to enable repeatable, auditable practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, IT, Risk Management, or a related field, or equivalent practical experience.</li><li>
5+ years of hands-on experience in cyber governance, risk, and compliance, information security, or related roles.</li><li>
Practical knowledge of common security frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and experience mapping controls to frameworks.</li><li>
Experience managing third-party/vendor risk assessments, contract security requirements, and remediation workflows.</li><li>
Strong communication and stakeholder management skills with the ability to influence technical and non-technical audiences.</li><li>
Analytical mindset with experience developing risk assessments, metrics, and executive-level reporting.</li><li>
Familiarity with GRC platforms, risk assessment tools, ticketing systems, and common productivity software.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications</h4><ul><li>
Relevant certifications such as CISSP, CISM, CRISC, CISA, or CDPSE preferred.</li><li>
Experience supporting SOC 2, ISO 27001, or other third-party audits and working with external assessors.</li><li>
Background in cloud security, identity and access management, or secure software development lifecycle practices.</li><li>
Experience implementing or operating GRC tooling (e.g., Archer, RiskLens, OneTrust, ServiceNow GRC) is a plus.</li></ul><h4 class="jobSectionHeader">
Work Environment &amp; Compensation</h4><ul><li>
Full-time position with a hybrid onsite/remote model; occasional travel and after-hours engagement may be required to support assessments and incident response activities.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, cross-functional collaboration, and career growth within Security, IT, and Risk functions.</li><li>
Inclusive, respectful culture that values diversity, equity, and work-life balance.</li></ul></div>

Cyber GRC Manager

Waad Education

<div>Waad Education is seeking an experienced Internal Audit Manager to establish, lead, and manage the internal audit function. Reporting directly to the Board Audit Committee, the role is responsible for developing and executing a robust audit strategy, evaluating the effectiveness of internal controls, and providing independent assurance on governance, risk management, and compliance across all schools and corporate functions.
Key Responsibilities:<ul><li>
Lead the development and implementation of the internal audit framework, charter, and methodology</li></ul><ul><li>
Develop and own the annual risk-based internal audit plan and ensure its effective execution</li><li>
Lead and manage internal audit activities across operational, academic, financial, HR, procurement, and compliance areas</li><li>
Evaluate the effectiveness of internal controls and drive continuous improvement initiatives</li><li>
Prepare and present audit reports, insights, and recommendations to the Board Audit Committee and senior management</li><li>
Lead risk assessment processes and support enterprise risk management initiatives</li><li>
Oversee and lead fraud investigations and special audit assignments</li><li>
Manage relationships with internal stakeholders and external auditors to ensure alignment and efficiency</li><li>
Promote a strong governance, risk, and control culture across the organization</li></ul> 

Requirements 
<ul><li>
Bachelor&rsquo;s degree in Accounting, Finance, Audit, or a related field</li><li>
Professional certification (CIA, CPA, ACCA, or equivalent) is required</li><li>
5&ndash;8 years of internal audit experience, including at least 2&ndash;3 years in a managerial or supervisory role</li></ul><ul><li>
Experience in education, services, or diversified groups; Big 4 experience is a plus</li><li>
Strong knowledge of IFRS, COSO, and risk management</li></ul>
Key Competencies<ul><li>
Experience with ERP systems (e.g., Microsoft Dynamics 365).</li></ul><ul><li>
Proven ability to lead internal audit functions and drive change.</li><li>
Excellent communication and stakeholder management skills.</li><li>
High integrity and professionalism.</li></ul></div>

Internal Audit Manager

Franklin Fitch

<div>
 
 This role leads the firm&rsquo;s Governance, Risk, and Compliance (GRC) program, including regulatory compliance, enterprise risk management, and audit assurance. It also owns Information Security AI governance, ensuring responsible and compliant use of AI and machine learning technologies.
 
 
 The Manager oversees SOC 2 and ISO 27001 programs, a small team and works cross functionally with key business units.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Maintain security policies, standards, and governance framework
 </li>
 <li>
 Lead SOC 2 and ISO 27001 audits (readiness, evidence, remediation)
 </li>
 <li>
 Ensure compliance with regulatory, client, and contractual requirements
 </li>
 <li>
 Manage exceptions, risk acceptances, and compensating controls
 </li>
 <li>
 Maintain required security authorizations for regulated engagements
 </li>
 <li>
 Coordinate evidence collection and track renewal timelines
 </li>
 <li>
 Lead AI security governance and define usage standards
 </li>
 <li>
 Implement controls for AI tools (data, access, third-party risk)
 </li>
 <li>
 Support client/regulatory inquiries and track emerging requirements
 </li>
 <li>
 Maintain the risk register and conduct periodic assessments (including AI and third-party risk)
 </li>
 <li>
 Develop reporting and translate risks into business impact
 </li>
 <li>
 Assess vendor security posture and track remediation
 </li>
 <li>
 Lead audit coordination and track findings and improvements
 </li>
 <li>
 Manage and develop a team of three analysts
 </li>
 <li>
 Standardize processes and set priorities
 </li>
 <li>
 Partner across Security, Legal, Compliance, Privacy, and Data teams
 </li>
 <li>
 Support client assessments and due diligence
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree (relevant field preferred)
 </li>
 <li>
 7&ndash;10 years in information security, GRC, audit, or risk
 </li>
 <li>
 Experience with SOC 2 and/or ISO 27001
 </li>
 <li>
 Team leadership experience
 </li>
 <li>
 Relevant certifications (e.g., CISSP, CISM, CRISC, CGRC) preferred
 </li>
 <li>
 Experience with GRC tools, third-party risk, and AI/data governance
 </li>
 <li>
 Strong communication and stakeholder management skills
 </li>
 </ul>
 
 
</div>

Information Security Manager

U.S. Bank

<div>At U.S. Bank, we&rsquo;re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at&mdash;all from Day One.<h2 class="jobSectionHeader">
Job Description</h2><div>
U.S. Bank is seeking an Operational Risk Review (ORR) Technology Manager (&quot;Manager&quot;) responsible for leading a team of Lead Analyst(s) and Analyst(s) (collectively &ldquo;Analysts&rdquo;) in the administration and execution of review activities within Independent Risk Review and Assessment (IRRA), a centralized second line of defense independent review function. This role offers an exciting opportunity to drive the continued growth, enhancement, and delivery of IRRA&rsquo;s ORR program. 
 
ORR provides risk-based review and effective challenge of the Company's operational risk (inclusive of technology risk), and operational risk-related processes and controls associated with the products and services offered across all business lines and enabling functions. Based on the Company's enterprise risk taxonomy, in-scope operational risk categories include: Fraud, Operations, People, Security of Physical Assets, Third Party, Business Resiliency, Systems, Cyber/Information Security, Legal, Model, Conduct, Data Management, and Fiduciary. Objective risk mitigation, process, and control review activities include planning and scoping, design and execution, reporting and rating, and Issue creation and validation. 
 
Key roles and responsibilities of the ORR Technology Manager include working with business lines and other Risk, Compliance, and Audit professionals across the Company to evaluate processes and controls to ensure an effective risk management framework. The ORR Technology Manager is responsible for directly managing a team of Lead Analyst(s) and Analyst(s), including overseeing review activities, timely completion of planned reviews, conducting performance management, and overall staff development. The Manager leads and oversees projects and activities to confirm compliance with internal policies, industry standards, and applicable laws and regulations related to technology, business resiliency, data governance, cyber, systems, artificial intelligence (AI), and information security. Through review performance, the Manager is responsible for the identification of gaps, weaknesses, and risk exposures within the control and process environment. If gaps are identified, the Manager will partner with the business line and Risk Management groups to recommend and influence solutions to mitigate operational risks. The Manager is responsible will deliver effective verbal and written communication of review results to the ORR Senior Manager, including draft Issues and Reports, and will respond to and/or escalation of significant risks, as appropriate.<div>
Basic Qualifications 
<ul><li>Bachelor's degree, or equivalent work experience</li><li>Typically more than 10 years of applicable experience</li></ul></div>
Preferred Skills/Experience<ul><li>Proven leadership skills.</li><li>Subject Matter Expert or advanced knowledge of technology, business resiliency, systems, data governance, cyber, and information security risks as well as industry trends that impact Bank operations.</li><li>Thorough understanding of risk management standards, the common definition of internal controls, and how control frameworks are designed and operate to mitigate risks.</li><li>Deep understanding of the business line&rsquo;s operations, products, services, systems, and associated risks.</li><li>Deep business acumen and credibility to help business line(s) proactively identify risks and address changing risk landscape.</li><li>Superb process facilitation, project management, and analytical skills with the ability to manage multiple tasks and deadlines simultaneously.</li><li>Excellent presentation, interpersonal, written and verbal communication skills.</li><li>Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.</li><li>Applicable professional certifications (e.g., CISA, GSNA, CISSP, CRISC, CIA, etc.) are preferred.</li></ul>
This role requires working from a U.S. Bank location three (3) or more days per week.</div>
If there&rsquo;s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.
Benefits:
Our approach to benefits and total rewards considers our team members&rsquo; whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following:<ul><li>
Healthcare (medical, dental, vision)</li><li>
Basic term and optional term life insurance</li><li>
Short-term and long-term disability</li><li>
Pregnancy disability and parental leave</li><li>
401(k) and employer-funded retirement plan</li><li>
Paid vacation (from two to five weeks depending on salary grade and tenure)</li><li>
Up to 11 paid holiday opportunities</li><li>
Adoption assistance</li><li>
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law</li></ul>
Review our full benefits available by employment status here.
U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.
E-Verify
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an Internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services.
The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $133,365.00 - $156,900.00
U.S. Bank will consider qualified applicants with arrest or conviction records for employment. U.S. Bank conducts background checks consistent with applicable local laws, including the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act as well as the San Francisco Fair Chance Ordinance. U.S. Bank is subject to, and conducts background checks consistent with the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA). In addition, certain positions may also be subject to the requirements of FINRA, NMLS registration, Reg Z, Reg G, OFAC, the NFA, the FCPA, the Bank Secrecy Act, the SAFE Act, and/or federal guidelines applicable to an agreement, such as those related to ethics, safety, or operational procedures.
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies.
Posting may be closed earlier due to high volume of applicants.</div>

Operational Risk Review Manager - Technology

SECU

<div>Who we are:
At SECU, we put our employees first, recognizing that their well-being and professional development are vital to our success. By fostering a supportive and empowering work environment, our employees are committed to helping members achieve long-term financial security. They are also inspired to give back to the communities we serve by volunteering and spreading kindness, which reflects our core values and who we are as an organization.
Every employee at SECU contributes to our member&rsquo;s financial well-being, and we&rsquo;ll always do what&rsquo;s right for our members, employees, and communities.
Feel good about what you do. Belong to a place where you matter and can make a difference.
What you will do:
The Governance Manager will support Corporate Governance Leadership with the daily operation and administration of SECU governance, risk and compliance programs/responsibilities. This position, through specialized knowledge and skill, provides support to the organization on all matters relating to corporate governance.
Governance Manager adheres to regulations and organizational policies, maintaining awareness and knowledge required to perform the duties of the position, including all aspects of the Bank Secrecy Act and related regulations, such as OFAC, and the USA Patriot Act, Fair Lending and Information Security.
A day in your life might include:
<ul><li>Responsible for daily management and coordination of SECU&rsquo;s Corporate Governance Program initiatives and workstreams.
</li><li>Develops and maintains organizational playbooks, policies, procedures, process-flows and reference material to ensure all processes are documented, organized and scaled to current and future state.</li>
<li>Maintains governance document repository system, ensures document organization/storage standards as well as version controls are in place and annual reviews are conducted and documented.
</li><li>Oversees the ongoing reviews and standardization of SECU policies, programs, procedures and other documents to ensure content is accurate and up to date.
</li><li>Serves as a facilitator for the annual examination(s). Manage regulatory workflows.
</li><li>Coordinates and facilitates training to all levels of the organization, ensures program documentation is accurate and up to date.</li>
<li>Supports remediation efforts of audit, exam, compliance and issues management findings.
</li><li>Develops comprehensive reporting and presentations for all program areas.
</li><li>Supports SECU projects and initiatives.
</li><li>Fosters a culture of compliance and legal awareness organizationally; remains aware of risks facing SECU and the industry.
</li><li>Supervises the Governance Analyst or Specialist positions</li>
</ul>
Additional Responsibilities may include:
<ul><li>Interact and support CUSO partners and credit union partners</li>
<li>Oversee required regulatory reporting</li>
<li>Develop and institute governance framework enterprise wide; ensure all programs are compliant with internal standards, regulations and legal requirements
</li></ul>What we need from you:
Education and Experience Requirements
<ul><li>Bachelor&rsquo;s degree required</li>
<li>Certified Credit Union Compliance Officer (CUCO) Certification or Certified Regulatory Compliance (CRCM) Certification required or must be obtained within the first year of employment</li>
<li>3-5 years management experience required</li>
<li>8-10 years of demonstrated responsibility in a Governance, Risk, or Compliance role with a focus on GRC program development, monitoring and reporting</li>
<li>Understanding of rules/regulations and enterprise risk awareness from prior roles</li>
<li>Credit Union experience preferred but not required</li>
<li>Demonstrates an understanding of SECU&rsquo;s culture, core values, mission and strategic priorities as it relates to one&rsquo;s work and overall performance</li>
<li>Clearly communicates information, thoughts and ideas in a clear, concise and organized manner</li>
<li>Identifies opportunities to improve efficiency, reduce errors, or enhance member satisfaction</li>
<li>Prioritizes tasks effectively to support team goals and organizational timelines</li>
<li>Applies critical thinking to troubleshoot issues and escalate concerns when appropriate</li>
<li>Understands the importance of confidentiality, compliance, and ethical behavior in daily responsibilities</li>
<li>Adapts to changes in processes, tools, or organizational priorities with a positive, solutions-focused approach</li>
<li>Maintains professionalism in communication, behavior, and representation of SECU</li>
</ul>
Physical Requirements
<ul><li>Must be able to remain in a stationary position, often standing or sitting for prolonged periods</li>
<li>Must be able to lift up to 25 pounds</li>
</ul>
Compensation Information: Offers will be commensurate with experience and education. Please Note: We typically hire at or below mid-point, which is $115,100 for this role.
<ul><li>Salary: Min. $88,500 &ndash; Max. $141,700</li>
</ul>
Other Compensation Includes:
<ul><li>Annual corporate-wide incentives</li>
</ul>
We provide comprehensive benefits, with a focus on total well-being:
<ul><li>Medical, vision, dental benefits</li>
<li>401k plan with company matching</li>
<li>Generous sick, vacation and personal leave</li>
<li>And more...2026 SECU Benefits Guide</li>
</ul>
SECU is committed to fostering a diverse, equitable, and inclusive workforce where all individuals are valued and respected. We take pride in providing equal opportunities for all qualified applicants regardless of race, ethnicity, national origin, gender, sexual orientation, gender identity or expression, religion, military or veteran status, or any other characteristics protected by law.</div>

Governance Manager

Search 10000+ Risk and compliance manager jobs near you this April. New roles added regularly across leading industries. Apply today.