Principal Compliance Officer - Information and AI

• Owns the domain’s obligation framework and compliance risk register for the domains of privacy, information security, and information governance and develops and recommends the organization’s compliance positions, monitoring changes in the regulatory landscape and drawing on counsel for legal interpretation and posture recommendations.
• Develops and recommends the organization’s compliance positions on AI obligations, including decisioning, data-use, and fairness, drawing on counsel for legal interpretation. Leads the development of the organization’s third party risk assessment for AI, building the framework, intake, riskassessment, and controls for AI as the discipline and law take shape and setting the approach the enterprise follows.
• Owns the assurance that controls for the assigned domain, designing and running the testing and monitoring across privacy, security, informationgovernance, and AI controls, in line with the compliance function’s standards. Coordinates and tracks remediation of issues with the control owners, validating closure.
• Partners with technology, information security, data, and various affected business advising on the regulatory landscape, identifies and strengthen controls, lands regulatory changes into processes, and reviews their firstline testing and monitoring results.
• Owns the organization’s line of sight into the domains’ compliance status, preparing materials that will give leadership, governance bodies, and the board a reliable view of posture and material risks.
• Prepares these domains for examination, responds to examiner requests, and drives findings to closure so leadership is equipped in examiner interactions, routing legal and position questions to counsel.

• Bachelor’s degree in a relevant field; advanced degree or Juris Doctor preferred.
• Expert-level experience in compliance, information risk, privacy, security, or technology risk within financial services or a regulated environment, including enterprise-level ownership of a compliance or risk area.
• Experience developing or standing up a governance or compliance program for an emerging area, such as artificial intelligence.
• Experience with agricultural finance, the Farm Credit System, or another regulated financial institution (preferred).
• Relevant certifications, such as an AI governance credential (IAPP AIGP), a privacy certification (CIPP/US, CIPM), IT risk or compliance credential (CRISC, CISA) (preferred).
• Expert knowledge of privacy, information security, and information governance obligations and the ability to operationalize them, working from counsel’s legal interpretation, into requirements and controls.
• Strong knowledge of AI governance and AI compliance risk—decisioning, data-use, and fairness—and of AI risk-management frameworks such as the NIST AI Risk Management Framework.
• Demonstrated ability to build a compliance framework for an emerging discipline where standards and law are still developing.
• Ability to design and run testing and monitoring of information controls in line with the compliance function’s standards.
• Technology fluency needed to partner credibly across technology, information security, and data teams and to translate technical realities into workable compliance requirements.
• Demonstrated ability to own a complex compliance area, develop and recommend the organization’s compliance positions, and support examinations as the domain expert.
• Integrity, objectivity, and discretion in handling confidential and sensitive information.
• Familiarity with using AI-enabled tools to support research, drafting, and workflow.

Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits.