Governance Risk & Compliance Lead

At U.S. Bank, we’re on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career.

Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description

U.S. Bank is seeking an experienced IS Governance Risk & Compliance Lead to oversee federal compliance, audit readiness, and technology risk activities supporting critical federal programs.

This role serves as a key compliance leader responsible for federal audits, Authorization to Operate (ATO) activities, regulatory compliance, and ongoing governance initiatives. The successful candidate will partner with Information Security, Technology, Risk, Compliance, and Architecture teams to ensure adherence to federal security and regulatory requirements while maintaining a strong audit-ready environment.

This position requires a combination of federal compliance expertise, technical understanding, and the ability to lead work across multiple teams through influence, guidance, and delegation.

Key Responsibilities

• Lead federal audit activities, including coordination with federal oversight agencies and internal stakeholders.

• Serve as the primary point of contact for audit requests, compliance reviews, and regulatory examinations.

• Lead audit readiness efforts, including evidence collection, documentation review, issue remediation, and control validation.

• Support Authorization to Operate (ATO) activities and ongoing federal compliance requirements.

• Partner with Information Security, Technology, Architecture, Infrastructure, and Cloud teams to maintain effective security and compliance controls.

• Oversee vendor compliance reviews and audits to ensure adherence to regulatory and risk management requirements.

• Identify compliance and control gaps and drive remediation efforts.

• Present audit findings, compliance assessments, and recommendations to technical and non-technical stakeholders.

• Provide leadership, coaching, and work direction across compliance initiatives.

Basic Qualifications

• U.S. Citizenship required.

• Ability to meet federal access, background screening, and clearance requirements.

• Bachelor's degree in a related field, or equivalent work experience.

• 10+ years of experience in regulatory compliance, audit, or risk management, with at least 5 years of federal audit experience including GAO or other federal entity audits.

• Experience managing or conducting vendor audits in a highly regulated industry.

Preferred Skills/Experience

• Experience supporting FedRAMP High ,
  FISMA ,
  NIST , and FIPS compliance requirements.

• Experience with
  Authorization to Operate (ATO) processes.

• Knowledge of security controls, compliance assessments, and vulnerability management.

• Understanding of technology architecture across application, database, infrastructure, cloud, and network environments.

• Experience with security tools such as Tenable ,
  Microsoft Defender , or similar platforms.

• Experience supporting Azure and Azure Government Cloud environments.

• Strong vendor risk management and third‑party compliance experience.

• Proven ability to lead through influence, delegate work effectively, and drive results across cross‑functional teams.

• Professional certifications such as CISA, CISSP, CRISC, CIA, CRCM, or CGRC preferred.

• Federal agency or government contractor experience preferred.

Location Expectation

This role requires working from a U.S. Bank location three (3) or more days per week.

If there’s…