Principal Compliance Officer - Information and AI

Compeer Financial; United States; Hybrid; USD 119,000 - 180,000; Full time

Benefits offered by this job

Hybrid model up to 50% work from home

401k with company match up to 9%

Medical, dental, vision, HSA/FSA

Vacation and leave

Learning & development

Certification reimbursement

Job summary

Compeer Financial seeks a Principal Compliance Officer for Information and AI to lead the organization’s privacy, information security, information governance, and AI governance programs. You will own the obligation framework, drive risk assessments, and coordinate governance across technology and data domains.

The role requires deep compliance expertise in financial services, with the ability to operationalize complex obligations and report posture to leadership and the board.

Qualifications

• Expert-level experience in compliance, information risk, privacy, security, or tech risk in financial services or regulated environments.
• Experience building governance or compliance programs for emerging areas like AI.
• Familiarity with AI governance and AI risk-management frameworks.

Responsibilities

• Owns domain obligation framework and compliance risk register for privacy, information security, and information governance.
• Leads AI obligations, including data-use, decisioning, and fairness; develops third-party AI risk assessment framework.
• Maintains controls testing and monitoring across privacy, security, governance, and AI; coordinates remediation with control owners.
• Prepares leadership and board materials on domain compliance status and risk posture.

Skills

Privacy & security

AI governance

Regulatory compliance

Risk management

Information governance

Education

J.D. preferred

Bachelor's degree

Job description

Principal Compliance Officer - Information and AI

IL-Bloomington; MN-Lakeville; WI-Sun Prairie; IL-Naperville; WI-Prairie du Sac; Open to any Compeer location

Empowered to live. Inspired to work.
Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally.

How we support you:

• Hybrid model – up to 50% work from home
• Flexible schedules including ample flexibility in the summer months
• Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match)
• Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP
• Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off
• Learning and development programs
• Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.)
• Professional membership/certification reimbursement and more!

Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs.

The contributions you will make: Leads compliance for the organization’s information domains, including privacy, information security,information governance, and AI governance, owning the obligation framework and positions thesedomains rely on and leading the build and execution of the organization's AI governance program as thefield takes shape. Accountable for maintaining the compliance posture for the domains and reporting oncurrent client posture and standing for same, tracking remediation and risk acceptance as appropriate.

Come join our growing legal and compliance team!

A typical day:

• Owns the domain’s obligation framework and compliance risk register forthe domains of privacy, information security, and information governanceand develops and recommends the organization’s compliance positions,monitoring changes in the regulatory landscape and drawing on counsel forlegal interpretation and posture recommendations.
• Develops and recommends the organization’s compliance positions on AIobligations, including decisioning, data-use, and fairness, drawing oncounsel for legal interpretation. Leads the development of the organization’sthird party risk assessment for AI, building the framework, intake, riskassessment,and controls for AI as the discipline and law take shape andsetting the approach the enterprise follows.
• Owns the assurance that controls for the assigned domain, designing andrunning the testing and monitoring across privacy, security, informationgovernance,and AI controls, in line with the compliance function’sstandards. Coordinates and tracks remediation of issues with the controlowners, validating closure.
• Partners with technology, information security, data, and various affectedbusiness advising on the regulatory landscape, identifies and strengthencontrols, lands regulatory changes into processes, and reviews their firstlinetesting and monitoring results.
• Owns the organization’s line of sight into the domains’ compliance status,preparing materials that will give leadership, governance bodies, and the board a reliable view of posture and material risks.
• Prepares these domains for examination, responds to examiner requests,and drives findings to closure so leadership is equipped in examinerinteractions, routing legal and position questions to counsel.

The skills and experience we prefer you have:

• Bachelor’s degree in a relevant field; advanced degree or Juris Doctor preferred.
• Expert-level experience in compliance, information risk, privacy, security, or technology risk within financial services or a regulated environment, including enterprise-level ownership of a compliance or risk area.
• Experience developing or standing up a governance or compliance program for an emergingarea, such as artificial intelligence.
• Experience with agricultural finance, the Farm Credit System, or another regulated financialinstitution (preferred).
• Relevant certifications, such as an AI governance credential (IAPP AIGP), a privacy certification(CIPP/US, CIPM), IT risk or compliance credential (CRISC, CISA) (preferred).
• Expert knowledge of privacy, information security, and information governance obligations andthe ability to operationalize them, working from counsel’s legal interpretation, into requirementsand controls.
• Strong knowledge of AI governance and AI compliance risk—decisioning, data-use, andfairness—and of AI risk-management frameworks such as the NIST AI Risk ManagementFramework.
• Demonstrated ability to build a compliance framework for an emerging discipline where standardsand law are still developing.
• Ability to design and run testing and monitoring of information controls in line with the compliancefunction’s standards.
• Technology fluency needed to partner credibly across technology, information security, and datateams and to translate technical realities into workable compliance requirements.
• Demonstrated ability to own a complex compliance area, develop and recommend theorganization’s compliance positions, and support examinations as the domain expert.
• Integrity, objectivity, and discretion in handling confidential and sensitive information.
• Familiarity with using AI-enabled tools to support research, drafting, and workflow.

How we will take care of you:

Our job titles may span more than one career level (associate, senior, principal, etc.). The actual title and base pay offered is dependent upon many factors, such as: training, transferable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. This role is eligible for variable compensation and other benefits.

Base Pay

$118,500 - $180,000 USD

Compeer Financial is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Must be authorized to work for any employer in the United States. Compeer is unable to sponsor or take over sponsorship of an employment visa at this time.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Compeer Financial’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.