Senior Technical Governance Program Manager

About the role

Lead Bank is a banking infrastructure platform trusted by innovative companies to power complex financial products. We enable fintechs to offer compliant, programmable services like payments, lending, and digital assets at scale. Banking has moved beyond traditional institutions and is now embedded directly into everyday experiences, meaning companies need modern infrastructure that is safe, secure, and operationally sound. Today, Lead is one of the only API-first, developer-focused partner banks with the financial, regulatory, and legal expertise required to help fintechs succeed. We operate offices in San Francisco, Sunnyvale, and New York City, and an FDIC-insured bank in Kansas City. The Information Security team helps Lead stay nimble enough to move fast without compromising on safety. They own cybersecurity, overseeing detection and response, and building security controls for all data networks, cloud infrastructures, and IT systems. Working closely with the Risk, Compliance, and Audit teams, they ensure Lead meets and stays up to date on all security standards. Scaling the systems that protect Lead and the fintechs we serve requires critical thinking, good judgment, and an ownership mentality. This is a collaborative team of builders who approach problems creatively, constantly iterating to improve the security of our platform.

Responsibilities

• Lead and manage enterprise technology governance, risk, compliance, and control initiatives across Information Security, Technology, Engineering, and Data organizations.
• Lead, mentor, and develop team members, including setting priorities and goals, providing ongoing coaching and feedback, and supporting professional growth and performance.
• Drive enterprise Data Management and Governance initiatives, including data security, data classification, retention, data quality, governance controls, and regulatory compliance requirements.
• Lead governance and readiness programs for enterprise Disaster Recovery (DR), including readiness assessments, control reviews, tabletop exercises, recovery testing, lessons learned, and resiliency improvement initiatives.
• Manage Security Compliance programs across Information Security, Technology, and Engineering teams, ensuring alignment with applicable regulatory requirements, industry frameworks, internal policies, and security best practices.
• Manage and oversee the enterprise Security Third-Party Risk Program, including risk assessments, due diligence, ongoing monitoring, control reviews, audits, issue management, and remediation tracking.
• Drive automation of audit and compliance evidence gathering, control monitoring, and governance workflows to improve efficiency, consistency, audit readiness, and control effectiveness.
• Lead coordination of internal and external audits covering technology, cybersecurity, cloud, engineering, infrastructure, and related controls. Manage evidence collection, lead control walkthroughs, audit requests, findings, and remediation activities through closure.
• Support and lead strategic initiatives and special projects including but not limited to emerging technology risk, Artificial Intelligence (AI) governance and risk management, compliance program enhancements, automation, regulatory readiness, and technology control modernization.
• Identify opportunities to strengthen technology governance and compliance through automation, continuous monitoring, risk-based controls, standardized processes, and scalable program improvements.
• Perform all other duties as assigned.

Qualifications

• 5–8 years of experience in Technology, Information Security, Cybersecurity, Engineering, Technology Risk, Governance, Risk & Compliance (GRC), or a related discipline.
• Experience managing, mentoring, and developing teams, with demonstrated ability to set priorities, provide feedback, and drive individual and team performance.
• Demonstrated experience leading complex, cross‑functional technology governance, risk, compliance, or security programs in high‑growth technology, fintech, startup, or similarly fast‑paced environments.
• Experience in banking, financial services, or other highly regulated industries preferred.
• Familiarity with AI tools, AI governance, AI risk management, and emerging technology controls.
• Strong understanding of technology governance