Serve as a primary point of contact for Arch Global Mortgage originating requests
Interface with international Arch Global Mortgage stakeholders to understand regulatory, customer, and business drivers.
Triage incoming requests, identify appropriate subject‑matter experts, coordinate inputs, and track responses to completion.
Draft and prepare regulatory responses, customer communications, and supporting materials for review, refinement, and approval by the CISO.
Develop background analysis, control narratives, and documentation used to support external responses.
Create and maintain regulatory‑to‑control mappings demonstrating alignment between Arch Global Mortgage requirements and Arch technology and security controls.
Interpret Arch policies, standards, and control frameworks for Arch Global Mortgage‑specific use cases and escalate gaps or ambiguities.
Support relevant SOC 2 engagements and other audit activities by coordinating evidence collection, drafting control descriptions and response inputs, and managing requests from auditors and internal teams.
Maintain working familiarity with business continuity and disaster recovery (BC/DR) concepts relevant to Arch Global Mortgage.
Partner with the CISO to establish and maintain a calendar of recurring Arch Global Mortgage governance, compliance, and reporting activities.
Draft metrics, summaries, and artifacts used for senior leadership discussions and board or committee materials.

Experience in IT governance, risk, compliance, or security risk management within financial services or insurance.
Experience working with global or non‑U.S. regulated businesses strongly preferred.
Experience supporting customer audits and third‑party risk management (TPRM) programs, particularly with banks or large financial institutions.
Prior technical background sufficient to understand, assess, and question technology and security controls.
Strong written communication skills, with experience drafting materials intended for external review.
Familiarity with SOC 2 and BC/DR concepts required (ownership experience not required).
Ability to work across time zones; U.S. West Coast preferred but negotiable, with willingness to overlap with Australian (Sydney) business hours.

multiple medical plans plus dental, vision and prescription drug coverage
a competitive 401k with generous matching
PTO beginning at 20 days per year
up to 12 paid company holidays per year plus 2 paid days of Volunteer Time Offer
basic Life and AD&D Insurance as well as Short and Long-Term Disability
Paid Parental Leave of up to 10 weeks
Student Loan Assistance and Tuition Reimbursement
Backup Child and Elder Care

Manager, IT Governance, Risk & Compliance

Key skills