Director, IT Governance, Risk, Compliance & AI

The Director, IT Governance, Risk, Compliance & AI will lead the enterprise governance function across information technology, cybersecurity, privacy, data, financial systems, and artificial intelligence. They will establish and operate an integrated, risk-based governance model that protects the company, enables disciplined innovation, and improves the speed and quality of decision-making.

What You Will Do

The successful candidate will translate complex regulatory, contractual, technical, and business requirements into clear policies, practical controls, measurable accountability, and sustainable operating practices. They will lead the development of IT governance policies, standards, procedures, control frameworks, exception processes, and accountability mechanisms.

Why It Might Be a Fit

Success in this role requires both strong individual contribution and the ability to collaborate across CDAIO teams and enterprise partners, harness collective capabilities, and strengthen the organization’s overall effectiveness.

Requirements

• Master's degree + minimum 13 years of demonstrated leadership experience; or Bachelor's degree in a related specialized area or equivalent combination of education and relevant work experience + minimum 15 years of demonstrated leadership experience
• Substantial leadership experience in IT governance, risk, compliance, information security, audit, or related enterprise technology functions within a highly regulated environment
• Demonstrated experience leading complex, geographically dispersed technical organizations and developing leaders and technical professionals
• Strong knowledge of IT control frameworks and risk methodologies, including relevant NIST frameworks, COBIT, ITIL, ISO 27001, and/or comparable standards
• Demonstrated experience with IT SOX controls, audit coordination, control testing, remediation management, and executive reporting
• Working knowledge of defense-industry and government-contracting requirements relevant to technology governance, including CMMC, NIST SP 800-171/172, DFARS, CUI, and supplier or third-party risk, as applicable
• Knowledge of AI governance principles, including responsible AI, model and data risk, privacy, security, human oversight, third-party AI services, AI lifecycle controls, and the NIST AI Risk Management Framework or comparable practices
• Ability to assess risk pragmatically and translate legal, regulatory, contractual, and technical requirements into clear, executable business actions
• Excellent executive communication, presentation, relationship-building, organizational-change, and influence skills

Benefits

• Highly competitive benefits
• Flexible work environment
• Contributions recognized and rewarded