1

Director Model Risk Governance Jobs in Colorado (NOW HIRING)

... governance, emerging threats, business continuity, and global safety. As a trusted advisor to ... business models. Logistics: Location: Westminster, CO-Onsite Travel Requirement: 15% Why You'll ...

... governance, emerging threats, business continuity, and global safety. As a trusted advisor to ... business models. Logistics: Location: Westminster, CO-Onsite Travel Requirement: 15% Why You'll ...

Direct experience designing or operating AI governance programs, model risk management frameworks, or technology risk management processes in financial services. * Deep understanding of the AI risk ...

Excellent communication skills - able to explain model risk, brief a committee on AI governance ... Self-directed and resourceful - able to build a program from the ground up, prioritize ...

... model to ensure common language and practices across portfolios. * Lead enterprise cyber risk ... Strong governance and policy acumen, including appetite/tolerance, exceptions, and escalation ...

... Execution Directors and Functional Leaders (e.g. VP - Engineering, Director - Contracting ... Promote and enable the ongoing development of a governance & risk culture; and * Effectively ...

next page

Showing results 1-20

Director Model Risk Governance information

What is the difference between Director Model Risk Governance vs Model Risk Analyst?

AspectDirector Model Risk GovernanceModel Risk Analyst
CredentialsAdvanced degrees (e.g., Master’s, PhD), professional certifications (e.g., FRM, CFA)Bachelor’s or Master’s degree, relevant certifications
Work EnvironmentStrategic oversight, policy development, senior stakeholder engagementData analysis, model validation, risk assessment
Employer & Industry UsageFinancial institutions, banks, asset managersFinancial institutions, risk management teams
Search & Comparison IntentUnderstanding leadership roles in model risk governanceEntry to mid-level model risk roles, analysis tasks

The main difference is that the Director Model Risk Governance focuses on strategic oversight, policy setting, and managing model risk at a senior level, while the Model Risk Analyst handles technical validation, data analysis, and risk assessment tasks. The director role involves leadership and decision-making, whereas the analyst role is more technical and operational.

What are the key skills and qualifications needed to thrive as a Director of Model Risk Governance, and why are they important?

To thrive as a Director of Model Risk Governance, you need deep expertise in quantitative finance, risk management, and model validation, often backed by an advanced degree in a quantitative field and relevant industry experience. Familiarity with risk management frameworks, regulatory standards (e.g., SR 11-7), and proficiency in analytical tools like Python, R, or SAS are typically required. Exceptional leadership, communication, and critical thinking skills help you effectively oversee teams and coordinate with stakeholders across the organization. These competencies are vital to ensure robust model governance, regulatory compliance, and informed risk-based decision-making at the enterprise level.

What are Director Model Risk Governance roles?

Director Model Risk Governance roles are senior positions responsible for overseeing and managing the risks associated with financial and predictive models within an organization. These professionals establish and implement model risk management frameworks, ensure compliance with regulatory requirements, and oversee model validation processes. They collaborate with model developers, validators, and business units to identify, assess, and mitigate model risks, as well as report on governance effectiveness to senior management. Their work is crucial in maintaining the reliability and integrity of models used for decision-making and regulatory reporting.

What are some common challenges faced by a Director of Model Risk Governance, and how can they be addressed?

A Director of Model Risk Governance often encounters challenges such as ensuring consistent model validation across diverse business units, keeping up with evolving regulatory requirements, and fostering effective communication between model owners, validators, and senior management. Addressing these challenges typically involves establishing robust model risk frameworks, maintaining clear documentation, and promoting a culture of transparency and collaboration. Regular training sessions and open forums can help bridge knowledge gaps, while leveraging technology can streamline model inventory and validation processes.
What are the most commonly searched types of Model Risk Governance jobs in Colorado? The most popular types of Model Risk Governance jobs in Colorado are:
What are popular job titles related to Director Model Risk Governance jobs in Colorado? For Director Model Risk Governance jobs in Colorado, the most frequently searched job titles are:
What job categories do people searching Director Model Risk Governance jobs in Colorado look for? The top searched job categories for Director Model Risk Governance jobs in Colorado are:
What cities in Colorado are hiring for Director Model Risk Governance jobs? Cities in Colorado with the most Director Model Risk Governance job openings:
Director of Cybersecurity Governance, Risk, and Compliance

Director of Cybersecurity Governance, Risk, and Compliance

Ball Corporation

Westminster, CO • On-site

$143K - $225K/yr

Other

Re-posted yesterday


Ball rating

8.0

Company rating: 8.0 out of 10

Based on 23 frontline employees who took The Breakroom Quiz


Job description

At Ball, integrity and trust are the foundation of who we are. Guided by our core values-"We Care. We Work. We Win."-we create a culture where every voice matters and every idea drives progress.  

Together with our global employees, customers, and partners, we're turning bold sustainability goals into reality and shaping a future we can all be proud of. 

Create a new future. Apply Today. 

The Director of Cybersecurity Governance, Risk, and Compliance (GRC) is accountable for designing, building, and leading enterprisewide cyber risk governance, regulatory compliance strategy, and boardlevel risk reporting for Ball Corporation's global manufacturing and supplychaindriven business. This role sets the enterprise cyber risk posture, translates business risk appetite into enforceable governance mechanisms, and ensures cybersecurity risk is measured, reported, and managed as a business risk and not a purely technical concern. The Director serves as Ball's primary authority on cybersecurity risk governance, regulatory compliance and assurance, and acts as a trusted advisor to the CISO, executive leadership, Legal, Internal Audit, and the Board. The role owns and governs all Security GRC subcapabilities: 1) Security Governance & Program Management, 2) Security Risk Management, 3) Security Assessments & Compliance Management, 4) CyberSupply Chain Risk Management, 5) Business Continuity Planning (cyber integration), 6) Security Training & Awareness, 7) Cyber Metrics and Reporting.

Essential Responsible Areas:

  • Establish and maintain the enterprise cybersecurity governance framework, including policies, standards, risk taxonomy, and accountability models, with a focus on building out missing program elements to elevate maturity.
  • Define and operationalize the enterprise cyber risk management program, including risk identification, assessment, prioritization, escalation, and reporting.
  • Own executive and Boardlevel cybersecurity risk & metrics reporting, ensuring alignment to business impact, materiality, and risk tolerance.
  • Lead the global cybersecurity compliance strategy, ensuring alignment with applicable regulatory, legal, and contractual requirements, with an emphasis on establishing rigorous security controls and repeatable compliance processes.
  • Provide senior oversight of cybersecurity audits, assessments, and assurance activities; ensure consistent and defensible outcomes.
  • Govern cyber supplychain and thirdparty risk management, embedding security risk considerations into vendor lifecycle processes.
  • Ensure cybersecurity risk is integrated into business continuity, crisis management, and enterprise resilience planning.
  • Build, lead, develop, and mentor the Security GRC team, establishing clear interfaces with other cybersecurity and business functions.
  • Ensure cybersecurity governance and compliance requirements are appropriately tailored to regional regulatory, legal, and operational realities while maintaining global consistency.
  • Partner with regional business and technology leaders to address localized cyber risk scenarios, including manufacturing, operational technology (OT), and supplychain considerations.
  • Oversee regional regulatory compliance obligations (e.g., data protection, critical infrastructure, export controls) and support regulatory inquiries or audits as required.
  • Enable effective risk communication and escalation between regions and corporate leadership, ensuring timely visibility of material risks.

Required Qualifications:

  • Bachelor's degree in Information Security, Computer Science, Risk Management, Business Administration, or a related field required; Master's degree (e.g., MBA or MS in Information Security/Risk Management) strongly preferred.
  • Minimum of 15 years of progressive experience in cybersecurity, technology risk, or enterprise risk management, including 7+ years leading and building GRC, risk, or compliance functions within complex, preferably global, organizations.
  • Demonstrated experience operating in regulated, assetintensive, or manufacturingcentric environments.
  • Deep knowledge of cybersecurity governance, risk, and compliance frameworks (with experience implementing NIST CSF and ISO 27001), and familiarity with relevant regulations (e.g., SOX ITGC, data protection laws).
  • CISSP or CISM certification required; CRISC, CGEIT, or similar riskfocused certification strongly preferred.

Compensation & Benefits: 

  • Expected Hiring Salary Range:$143,000, - $225,000   (Salary to be determined by the applicant's education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data.)  
  • This role will be eligible to participate in the annual incentive compensation plan. 
  • Please visit our "Total Rewards" page to learn more about Ball's comprehensive benefits structure.  
  • Onsite Work Environment:This position is based in [add the location here] and requires regular in-person engagement by working on-site. Travel and local commute between Ball locations and other possible non-Ball locations may be required.  
  • Hybrid On-Site Work Environment: Based in Colorado, this position requires regular in-person engagement by working on-site for four (4) or more days per work week (with core collaboration days of Tuesday, Wednesday, and Thursday). [Travel and local commute between Ball locations and other possible non-Ball locations may be required.] 

When submitting your application to Ball, we encourage you to emphasize your skills, experience, and qualifications that align with the role.  

Ball Corporation is proud to be an Equal Opportunity Employer. We actively encourage applications from everybody. All qualified job applicants will receive consideration without regard to race, color, religion, creed, national origin, aboriginality, genetic information, ancestry, marital status, sex, sexual orientation, gender identity or expression, physical or mental disability, pregnancy, veteran status, age, political affiliation or any other non-merit characteristic. 

Please note the advertised job title might vary from the job title on the contract due to local job title structure and global HR systems. 

  • Under Colorado, California, Connecticut, Minnesota, and Pennsylvania law, you have the right to exclude or redact age-related details-such as your date of birth, school attendance dates, or graduation dates-from your resume, cover letter, CV, or other supporting documents (e.g., transcripts, certificates).  
  • Legal authorization to work in the U.S. We will not sponsor individuals for employment visa, now or in the future, for this job opening. 

* This position will be posted internally for a minimum of 5 days and will remain open until filled or adjusted based on the volume of applicants. 

No agencies please. 

Global Grade 14A


What Ball employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom