Senior Technical Governance Program Manager

About Lead Bank

Lead is a banking infrastructure platform trusted by the most innovative companies to power complex financial products. We enable fintechs to offer compliant, programmable services like payments, lending, and digital assets king has moved beyond traditional institutions and is now embedded directly into everyday experiences, meaning companies need modern infrastructure that is safe, secure, and operationally sound.

Today, Lead is one of the only API-first, developer-focused partner banks with the financial, regulatory, and legal expertise required to help fintechs succeed. We operate offices in San Francisco, Sunnyvale, and New York City, and an FDIC-insured bank in Kansas City.

The Information Security team helps Lead stay nimble enough to move fast without compromising on safety. They own cybersecurity, overseeing detection and response, and building security controls for all data networks, cloud infrastructures, and IT systems. Working closely with the Risk, Compliance, and Audit teams, they ensure Lead meets and stays up to date on all security standards. Scaling the systems that protect Lead and the fintechs we serve requires critical thinking, good judgment, and an ownership mentality.

This is a collaborative team of builders who approach problems creatively, constantly iterating to improve the security of our platform.

Lead Bank is seeking a Senior Security Technical Governance Program Manager to lead the strategy, execution, and continuous optimization of the bank’s technology governance, compliance, and risk programs. This role will be responsible for ensuring that security controls across the bank’s technology environment, internal operations, and Banking-as-a-Service (BaaS) ecosystem meet rigorous regulatory requirements, industry standards, and internal risk tolerance.

The Senior Technical Governance Program Manager will play a critical role in standardizing security compliance processes, driving continuous monitoring, and embedding automated security controls into everyday operations. This position will partner closely with Security Engineering, Technology, Data, Compliance, and Enterprise Risk Management (ERM) teams to modernize control frameworks, maintain constant audit readiness, and safely govern emerging technologies across the organization.

• Lead and manage enterprise technology governance, risk, compliance, and control initiatives across Information Security, Technology, Engineering, and Data organizations.
• Lead, mentor, and develop team members, including setting priorities and goals, providing ongoing coaching and feedback, and supporting professional growth and performance.
• Drive enterprise Data Management and Governance initiatives, including data security, data classification, retention, data quality, governance controls, and regulatory compliance requirements.
• Lead governance and readiness programs for enterprise Disaster Recovery (DR), including readiness assessments, control reviews, tabletop exercises, recovery testing, lessons learned, and resiliency improvement initiatives.
• Manage Security Compliance programs across Information Security, Technology, and Engineering teams, ensuring alignment with applicable regulatory requirements, industry frameworks, internal policies, and security best practices.
• Manage and oversee the enterprise Security Third-Party Risk Program, including risk assessments, due diligence, ongoing monitoring, control reviews, audits, issue management, and remediation tracking.
• Drive automation of audit and compliance evidence gathering, control monitoring, and governance workflows to improve efficiency, consistency, audit readiness, and control effectiveness.
• Lead coordination of internal and external audits covering technology, cybersecurity, cloud, engineering, infrastructure, and related controls. Manage evidence collection, lead control walkthroughs, audit requests, findings, and remediation activities through closure.
• Support and lead strategic initiatives and special projects including but not limited to emerging technology risk, Artificial Intelligence (AI)…