Director, Risk

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and enhance Alkami’s enterprise and technology risk management program.

• Direct the processes of risk identification, assessment, mitigation, acceptance, monitoring, reporting, and escalation.

• Provide strategic guidance on risk frameworks, methodologies, metrics, and reporting.

• Implement ISO, COSO, NIST, COBIT, and other relevant financial services frameworks and standards.

• Identify and track key risks in alignment with Alkami’s established risk appetite.

• Assist with IT risk assessments, including the identification and analysis of threats.

• Create and maintain IT risk and control assessments.

• Assess the design and effectiveness of risks and controls in collaboration with risk owners.

• Examine risk ratings and control decisions, including mitigation, remediation, acceptance, and avoidance.

• Review monitoring and testing outcomes, reporting on the adequacy and effectiveness of the risk and control environment.

• Foster risk awareness, accountability, and responsibility across Alkami.

• Manage the governance lifecycle for AI, machine learning, and generative AI applications.

• Formulate AI governance policies, standards, review criteria, and control requirements.

• Assess AI-related risks pertaining to data, privacy, information security, system behavior, third-party providers, regulatory obligations, and client/customer impact.

• Assist the Chief Compliance Officer and Compliance function with business continuity, disaster recovery, regulatory management, compliance advisory issues, incidents, and cross-functional initiatives as required.

• Report directly to the Chief Compliance Officer.

⛳️ Requirements

• A bachelor’s degree is required; a master’s degree is preferred, or an equivalent combination of education and work experience.

• Over 15 years of progressive experience in risk management, internal audit, compliance, IT audit/security risk, or related control functions.

• A minimum of 5 years leading risk, control, compliance, or governance programs.

• Comprehensive knowledge of risk and control frameworks, standards, and regulatory expectations, including NIST, SCF, ISO, COSO, COBIT, FFIEC, FDIC, NCUA, CFPB, OCC, GLBA, SOC, and PCI DSS.

• Familiarity with IT security and privacy risk principles, technology controls, and risks associated with emerging technologies.

• Proven experience in developing, implementing, or managing AI governance, AI risk management, or responsible AI practices.

• Technical proficiency in artificial intelligence, machine learning, and generative AI.

• Experience in translating regulatory, risk, privacy, security, or control requirements into actionable business, product, technology, platform, or process requirements.

• At least 10 years of experience in banking, financial services, FinTech, or a regulated technology setting.

• One or more relevant certifications are preferred, such as CRCM, CIA, CPA, CISA, CRMA, CRISC, CISSP, CISM, CBCP, CGRC, IAPP AIGP, or equivalent.

• Strategic and pragmatic risk leadership skills with sound judgment and strong follow-through.

• Ability to lead and facilitate discussions on risk and control, challenge assumptions, clarify accountability, and drive decisions and remediation efforts.

• Capacity to serve as a subject matter expert in enterprise, technology, information security, privacy, and emerging technology risk, including AI/ML and generative AI risks.

• Excellent written and verbal communication skills.

• Experience with GRC or similar risk management tools, including Optro/AuditBoard or comparable platforms.

• Must be eligible to work in the US for full-time employment; employment sponsorship is not available.

🏝️ Benefits

• Remote-first work environment.

• Unlimited paid time off.

• 401(k) plan with employer matching.

• Diverse and inclusive workplace.

• A fun and engaging company culture.