Senior Technical Governance Program Manager

Lead is a banking infrastructure platform trusted by the most innovative companies to power complex financial products. We enable fintechs to offer compliant, programmable services like payments, lending, and digital assets at scale. Banking has moved beyond traditional institutions and is now embedded directly into everyday experiences, meaning companies need modern infrastructure that is safe, secure, and operationally sound.

Today, Lead is one of the only API-first, developer-focused partner banks with the financial, regulatory, and legal expertise required to help fintechs succeed. We operate offices in San Francisco, Sunnyvale, and New York City, and an FDIC-insured bank in Kansas City.

The Information Security team helps Lead stay nimble enough to move fast without compromising on safety. They own cybersecurity, overseeing detection and response, and building security controls for all data networks, cloud infrastructures, and IT systems. Working closely with the Risk, Compliance, and Audit teams, they ensure Lead meets and stays up to date on all security standards. Scaling the systems that protect Lead and the fintechs we serve requires critical thinking, good judgment, and an ownership mentality. This is a collaborative team of builders who approach problems creatively, constantly iterating to improve the security of our platform.

Lead Bank is seeking a Senior Security Technical Governance Program Manager to lead the strategy, execution, and continuous optimization of the bank’s technology governance, compliance, and risk programs. This role will be responsible for ensuring that security controls across the bank’s technology environment, internal operations, and Banking-as-a-Service (BaaS) ecosystem meet rigorous regulatory requirements, industry standards, and internal risk tolerance.

The Senior Technical Governance Program Manager will play a critical role in standardizing security compliance processes, driving continuous monitoring, and embedding automated security controls into everyday operations. This position will partner closely with Security Engineering, Technology, Data, Compliance, and Enterprise Risk Management (ERM) teams to modernize control frameworks, maintain constant audit readiness, and safely govern emerging technologies across the organization.

• →

  Lead and manage enterprise technology governance, risk, compliance, and control initiatives across Information Security, Technology, Engineering, and Data organizations.

• →

  Lead, mentor, and develop team members, including setting priorities and goals, providing ongoing coaching and feedback, and supporting professional growth and performance.

• →

  Drive enterprise Data Management and Governance initiatives, including data security, data classification, retention, data quality, governance controls, and regulatory compliance requirements.

• →

  Lead governance and readiness programs for enterprise Disaster Recovery (DR), including readiness assessments, control reviews, tabletop exercises, recovery testing, lessons learned, and resiliency improvement initiatives.

• →

  Manage Security Compliance programs across Information Security, Technology, and Engineering teams, ensuring alignment with applicable regulatory requirements, industry frameworks, internal policies, and security best practices.

• →

  Manage and oversee the enterprise Security Third-Party Risk Program, including risk assessments, due diligence, ongoing monitoring, control reviews, audits, issue management, and remediation tracking.

• →

  Drive automation of audit and compliance evidence gathering, control monitoring, and governance workflows to improve efficiency, consistency, audit readiness, and control effectiveness.

• →

  Lead coordination of internal and external audits covering technology, cybersecurity, cloud, engineering, infrastructure, and related controls. Manage evidence collection, lead control walkthroughs, audit requests, findings, and remediation activities through closure.

• →

  Support and lead strategic initiatives and special projects including but not limited to emerging technology risk, Artificial Intelligence (AI) governance and risk management, compliance program enhancements, automation, regulatory readiness, and technology control modernization.

• →

  Identify opportunities to strengthen technology governance and compliance through automation, continuous monitoring, risk-based controls, standardized processes, and scalable program improvements.

• →

  Perform all other duties as assigned.

• 5–8 years of experience in Technology, Information Security, Cybersecurity, Engineering, Technology Risk, Governance, Risk & Compliance (GRC), or a related discipline.

• Experience managing, mentoring, and developing teams, with demonstrated ability to set priorities, provide feedback, and drive individual and team performance.

• Demonstrated experience leading complex, cross-functional technology governance, risk, compliance, or security programs in high-growth technology, fintech, startup, or similarly fast-paced environments.

• Experience in banking, financial services, or other highly regulated industries preferred.

• Familiarity with AI tools, AI governance, AI risk management, and emerging technology controls.

• Strong understanding of technology governance, cybersecurity frameworks, cloud platforms, infrastructure security, engineering controls, technology risk, enterprise risk management, and compliance practices.

• Experience working with internal and external auditors and managing remediation activities from identification through closure.

• Demonstrated ability to automate, streamline, or modernize compliance, governance, risk, and audit evidence processes.

• Experience developing governance metrics, executive reporting, risk assessments, control frameworks, or compliance dashboards.

• Strong program management, stakeholder management, communication, organizational, analytical, and cross-functional collaboration skills.

• Ability to operate effectively across technical and non-technical teams and translate complex technology, security, risk, and compliance concepts into actionable business outcomes.