Cyber/Data/AI-Associate Director - Financial Services

Guidehouse; Arlington (VA); On-site; USD 149,000 - 248,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Plan

Paid Holidays

Parental Leave

Tuition Reimbursement

Mobility Stipend

Employee Referral Program

Job summary

Guidehouse seeks an Associate Director in its Financial Services Risk Management & Regulatory Compliance practice to help clients address cybersecurity, information security, data governance, AI risk, and enterprise risk management. You will lead engagements, design risk assessments, advise on regulatory frameworks, and develop governance models for major financial institutions.

You will mentor staff, contribute to thought leadership, and collaborate with other leaders to cross-sell services

Qualifications

• Bachelor's degree required.
• 7+ years in cybersecurity, information security, technology risk, or related areas at financial institutions, crypto/digital assets exchanges, or consulting/audit firms.
• Deep understanding of banking industry and regulatory actions.
• Experience performing risk assessments, controls design, testing, and third-party risk management.
• Knowledge of CSF, AI RMF, ISO 27001, COBIT, COSO ERM.
• Strong project management and communications skills.
• Willingness to travel up to 10%.

Responsibilities

• Lead complex client engagements focused on cybersecurity and risk across banking, capital markets, payments, fintech and insurance.
• Design and execute risk assessments, controls evaluations, and target operating models.
• Advise on risk frameworks aligned with CSF, AI RMF, ISO 27001, COBIT and FFIEC guidance.
• Develop governance documentation, reports, and strategic recommendations for executives.
• Mentor junior staff and support business development and cross-practice collaboration.

Skills

Cybersecurity risk

Information security

Data governance

AI risk

Regulatory compliance

ERM

Education

Bachelor's degree

Tools

NIST CSF

ISO 27001

COBIT

COSO ERM

Job description

What You Will Do

Guidehouse continues to expand its Financial Services Risk Management & Regulatory Compliance practice and is seeking an experienced Associate Director to help clients address emerging risks across cybersecurity, information security, data governance, AI, and enterprise risk management. This leader will bring deep domain expertise in technology and non-financial risk to advise financial institutions through transformation, modernization, and regulatory remediation initiatives. Responsibilities include, but are not limited to, the following:

• Lead complex client engagements focused on cybersecurity risk, information security governance, data risk, AI risk management, enterprise risk management (ERM), operational risk, and technology risk across banking, capital markets, payments, fintech, and insurance clients.
• Design and execute enterprise risk assessment, technology risk assessment, data and AI risk assessment, controls evaluations, maturity assessments, and target operating model initiatives.
• Advise clients on the design, enhancement, and implementation of risk management frameworks aligned with industry standards and regulatory expectations, including NIST Cybersecurity Framework (CSF), NIST AI Risk Management Framework (AI RMF), ISO 27001, COBIT, FFIEC guidance, and applicable banking regulations.
• Support clients in developing sustainable governance models for cybersecurity, information security, data governance, AI governance, technology risk management, model risk management, third-party risk management, and operational resilience.
• Lead remediation programs, including Matters Requiring Attention (MRAs), Matters Requiring Immediate Action (MRIAs), consent orders, internal audit findings, and enterprise risk transformation initiatives.
• Develop executive-ready reports, presentations, risk assessments, operating models, governance documentation, policies, and strategic recommendations for senior client stakeholders.
• Serve as a trusted advisor to client executives, including Chief Risk Officers (CROs), Chief Information Security Officers (CISOs), Chief Data Officers (CDOs), Chief AI Officers, Chief Technology Officers (CTOs), Internal Audit leaders, and business executives.
• Manage multiple workstreams and engagement teams, ensuring delivery excellence, quality, budget management, and client satisfaction.
• Anticipate and resolve client concerns quickly.
• Coach, mentor, and develop junior level staff while fostering an inclusive, collaborative, and high-performing team environment.
• Contribute to business development by supporting proposals, solution development, client pursuits, relationship expansion, and thought leadership activities.
• Work with other leaders to develop intellectual property, methodologies, accelerators, and market-facing thought leadership related topics such as cyber risk, data & AI governance, technology risk, and enterprise risk management.
• Develop collaborative relationships with the other related specialty practices and non-specialty practices across the firm to cross-sell relevant products and services.

Job Family

Management Consulting

Travel Required

Up to 10%

Clearance Required

None

What You Will Need

• Bachelor's degree.
• Minimum Seven(7) years of cybersecurity, information security, technology risk, enterprise risk management, operational risk, data governance, AI governance, or regulatory compliance experience at national and regional financial institutions, crypto/digital assets exchanges, securities / capital markets institutions, regulatory / government agencies, and / or consulting or audit firms.
• Deep understanding of banking industry (Mortgage, Auto, Student, Credit Card, and / or Unsecured Lending, etc.).
• Deep knowledge of laws and regulations as well as enforcement actions
• Experience performing risk assessment; controls design, implementation, assessment, and testing; third party risk management; compliance program; regulatory change management; compliance testing; and / or regulatory inquiry and response projects.
• Experience designing and implementing risk frameworks aligned to industry standards such as: NIST Cybersecurity Framework (CSF), NIST AI Risk Management Framework (AI RMF), ISO 27001, COBIT, COSO ERM.
• Outstanding project management skills to include motivating team, training, developing and supervising team, and invoicing.
• Outstanding communication and public speaking skills.
• Proficient in Microsoft Outlook, Word, Excel, Power Point, and SharePoint.
• Highly motivated, driven, and dynamic attitude towards work and career.
• Willingness to travel whenever needed based on client and project needs.
• High-energy, positive, persuasive, and aptitude to lead by example.

What Would Be Nice To Have

• Master's degree.
• Professional certifications such as: CISSP, CISM, CRISC, CGEIT, CISA, Certified in Risk and Information Systems (CRISC), Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified Third-Party Risk Professional (CTPRP), Project Management Professional (PMP), AWS, Azure, or Google Cloud security certifications.
• Experience with AI governance frameworks, Responsible AI programs, model governance, or AI regulatory compliance.
• Experience with cloud security governance, DevSecOps, data security, or emerging technology risk.
• Experience supporting regulatory examinations, consent orders, MRAs, MRIAs, or internal audit remediation programs.
• Experience working with Governance, Risk, and Compliance (GRC) platforms such as Archer, ServiceNow, MetricStream, etc.
• Demonstrated ability to build collaborative relationships across cross-functional teams and support practice growth initiatives.
• Extremely driven, energetic, and able to thrive in a results-oriented, entrepreneurial, and analytical environment.

The annual salary range for this position is $149,000.00-$248,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits Include

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Position may be eligible for a discretionary variable incentive bonus
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend

About Guidehouse

Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at [e-mail]. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or [e-mail]. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.

If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact [e-mail]. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.