College Board

Lead risk assessment and management practices across technology systems, define security standards, mentor staff, and collaborate cross-functionally to integrate security into decisions. | 8+ years in security engineering or architecture with expertise in cloud, identity, or application security, strong stakeholder management, and ability to create repeatable standards. | College Board – Technology – Risk Engineering Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). Type: This is a full-time position About the Team College Board’s Enterprise Security Engineering (ESE) team currently consists of 6 full-time staff and additional contractors. ESE is responsible for implementing and managing cutting-edge security solutions and tools. We protect the confidentiality, integrity and availability of data and endpoints across physical and cloud environments. We protect workloads and data in AWS and Azure, corporate networks, user endpoints around the country and data in SaaS and PaaS environments. We enable our developers and colleagues to deliver new, secure digital offerings that include the Digital SAT and AP exams. The work we perform supports the College Board’s mission to connect students to college success and opportunity. College Board is committed to creating an inclusive environment where all team members feel valued, respected, and supported in their work. We welcome individuals from diverse backgrounds and experiences to join our team and contribute to our ongoing success. About the Opportunity As a Lead Risk Engineer, you will provide technical leadership for how College Board identifies, reviews, and manages risk across its technology systems. College Board's technology footprint spans cloud infrastructure, vendor and API integrations, identity and access for automated systems, and an expanding set of AI and agentic capabilities — and the organization needs a consistent, repeatable practice for assessing risk across all of it, not AI alone. This role exists to build and lead that practice. You will work within an existing security engineering team and across the Technology division to run risk reviews of new and existing systems, define controls and identity practices for automated and machine-driven access (including AI agents and non-human identities where relevant), and partner with stakeholders across the organization to bring security into decisions early. You will not only execute this work — you will shape the standards, patterns, and practices that let others execute it consistently, and you will lift the engineers around you through mentoring, paired reviews, and shared knowledge rather than becoming a single point of expertise. This is a role for a technical leader comfortable operating across team and service boundaries, spanning risk domains where standards are still maturing — from cloud and vendor risk to identity and access for automated systems to emerging technologies such as agentic AI. You will contribute to the strategic direction of the risk engineering program — identifying risks and opportunities that influence roadmap decisions — while remaining hands-on in reviews, threat modeling, and control design. Your impact will be measured in durable outcomes: reviews that are repeatable and evidenced, risk that is owned and documented rather than assumed, and stakeholders across the organization who engage security early because the engagement is practical and predictable. In this role, you will: Lead operational risk reviews and delivery enablement (45%) Lead risk-based security reviews of technology implementations across domains — including cloud architecture, application security, vendor/third-party integrations, identity and access, and emerging technologies such as GenAI and agentic AI systems — assessing architectures, data flows, data classification handling, and misuse scenarios. Evolve the risk review practice into a documented, repeatable methodology with risk tiering, reusable templates, decision records, and findings tracking. Define and maintain secure-by-default standards, patterns, and reference guidance that reduce review friction and enable delivery teams to meet expectations on the first pass. Cross team and service boundaries to unblock delivery — translating risk and governance requirements into practical implementation steps that fit Agile delivery, and anticipating risks before they become launch blockers. Where systems involve automated or autonomous behavior (e.g., AI agents, service accounts, machine identities), assess and document ownership, credential scope, and control requirements as part of the standard review. Drive cross-organizational risk alignment (30%) Serve as a primary security/risk partner to organization-level teams and governance bodies — including teams driving responsible AI use, such as GenAI Studio and the GenAI Governance Committee, as well as platform, procurement, and legal stakeholders — establishing recurring consultation touchpoints and pre-procurement engagement. Embed risk requirements into tool onboarding, procurement, and vendor contract processes (e.g., data handling, retention and no-train terms, telemetry expectations, identity and access provisions). Identify emerging or higher-uncertainty risk areas early — including agentic AI, non-human identities, and new integration patterns — and bring them into the standard review process rather than handling them ad hoc. Build program maturity and grow the team (25%) Define risk acceptance criteria, control requirements, and escalation thresholds; ratify them through appropriate governance bodies and apply them consistently across use cases entering production. Mentor engineers on risk review practices through paired reviews, documentation, and teaching; ensure knowledge is shared and no capability depends on a single person. Contribute to defining the strategic direction of the risk engineering program — synthesizing findings from real implementations into roadmap priorities, and producing leadership reporting on risk posture and program outcomes. About you, you have: 8+ years in security engineering, application security, cloud security, or security architecture, including demonstrated technical leadership of work that crosses team and service boundaries. Deep, practical expertise in at least two relevant technical areas — for example: cloud security architecture, identity and access management (including non-human/service identities), application security, vendor/third-party risk, or AI/GenAI application security. Experience designing identity and access controls for service accounts, API credentials, or machine identities, and applying least-privilege principles in automated systems. Experience running or contributing to risk-based security reviews of technology implementations, including assessing architecture, data flows, and misuse scenarios; exposure to AI/GenAI or agentic systems is a plus but not required. A track record of turning ambiguous, emerging risk domains into documented standards, repeatable processes, and adoptable guidance. Demonstrated ability to work through others: mentoring engineers, sharing knowledge deliberately, and lifting the capability of a team rather than concentrating expertise. Strong stakeholder skills — building relationships with product, platform, legal, procurement, and governance partners, and presenting risk tradeoffs to technical and non-technical audiences. Comfort operating where standards, tooling, and regulatory expectations are still evolving (e.g., FERPA and student data privacy obligations, and emerging AI governance frameworks). Ability to travel 3–5 times per year to College Board offices. Authorization to work in the United States. All roles at College Board require: A passion for expanding educational and career opportunities and mission-driven work Authorization to work in the United States for any employer Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new AI-driven solutions and a comfort learning and applying new digital tools independently and proactively Clear and concise communication skills, written and verbal A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success About Our Process Application review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days. While the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, performance exercise, a panel interview, a conversation with leadership and reference checks. What We Offer At College Board, we offer more than just a paycheck—we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive. We're a self-sustaining nonprofit that believes in fair and competitive compensation, grounded in your qualifications, experience, impact, and the market. A Thoughtful Approach to Compensation The hiring range for this role is $168,000 - $183,000 Your exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board. We aim to make our best offer upfront—rooted in fairness, transparency, and market data. We adjust salaries by location to ensure fairness, no matter where you live. #LI-DC1 #LI-REMOTE

Lead modernization of legacy Windows desktop app to web using ASP.NET MVC and bridge product and engineering teams. | 10+ years development with deep C#/.NET expertise and mentoring experience required. | College Board – Technology – PowerFAIDS Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office) Type: This is a fully remote role. About the Team The PowerFAIDS team at College Board is a close-knit, dedicated group of professionals with a passion for higher education. The team is committed to providing cutting-edge technology solutions and customer support to facilitate the awarding of over $7 billion in financial aid each year. We pride ourselves on being innovative in our industry by continuously improving our products and services. This team is currently made up of 20+ engineers, a mix of full-time staff and contractors working on delivering solutions for Financial Aid Management. About the Opportunity You will play a pivotal role in modernizing PowerFAIDS, the financial aid platform trusted by colleges and universities across the country, by helping rebuild its long-standing Windows desktop application into a modern, accessible web experience. As a Senior Lead Engineer, you will be the technical bridge between our Product Owners, UX designers, and engineering teams, translating complex financial aid business requirements into clean, well-scoped implementations that two delivery teams can build with confidence. You’ll write production ASP.NET MVC code yourself, raise the engineering quality bar across both teams, and champion AI-assisted development practices to accelerate the rebuild toward our 2027 milestone of ~100 web views in production. This is a high-visibility, multi-year modernization effort where your influence will shape the codebase, the team, and ultimately the daily work of financial aid administrators nationwide. In this role, you will: Design & Implementation (50%) Build ASP.NET MVC 5 views end-to-end (ViewModel, Service, Adapter, Controller, and Razor views with DevExpress MVC controls) following the established PowerFAIDS Web architecture that reuses the shared business and data-access layers Maintain the highest engineering standards by partnering with Product Owners, UX designers, and architecture stakeholders to translate complex financial aid requirements into clean, well-scoped implementations Decompose complex product capabilities into specific, verifiable functional changes that two delivery teams (Nova and Orion) can execute with confidence Leverage AI-assisted development (GitHub Copilot today, Claude Code as it becomes available) to accelerate the team toward delivering ~100 web views by end of 2027, while maintaining Agile and CI/CD best practices Team Operations & Success (25%) Participate in and help lead Agile SCRUM ceremonies (Sprint Planning, Grooming, Daily Stand-ups, Demos) across the Nova and Orion delivery teams Lead peer code reviews and raise the overall engineering quality bar across both delivery teams Assist in the resolution of production issues across PowerFAIDS Web and the shared business / data-access layers Adhere to development standards and security policies, partnering with our ISO partner on PowerFAIDS Web security requirements Adopt continuous integration and continuous delivery (CI/CD) practices for rapidly implementing, testing, and delivering high-quality code Continuously grow as a poly-skilled engineer comfortable across the full ASP.NET MVC stack, including DevExpress UI controls, jQuery, and the shared .NET business layer Software Solutioning & Design (25%) Develop and maintain deep understanding of the financial aid domain and PowerFAIDS’ specific business processes (Need Analysis, Dynamic Redetermination, Audit Trail, etc.) Work closely with Product Owners, UX designers, and senior architects to evaluate feature requests, provide level-of-effort estimates, and contribute to roadmap and sprint planning Conduct and lead design reviews; partner with internal senior architects for architectural validation on the program’s harder problems (e.g., reporting modernization, file-system interactions, multi-threading in a web context) About you, you have: 10+ years of production-level software development experience with deep expertise in C# / ASP.NET MVC and the .NET Framework (4.x); experience modernizing legacy Windows/desktop applications to web platforms is a strong plus Proven ability to partner with non-technical stakeholders including Product Owners, UX designers, business and analysts to translate complex domain requirements into well-scoped, dev-ready stories Strong problem-solving skills with hands-on experience navigating layered architectures (MVC, services, adapters, typed DataSets) and modernizing legacy codebases incrementally Experience with DevExpress MVC Extensions, Autofac DI, jQuery, SQL Server, and xUnit/Moq is a strong plus Proven ability to substantially lift the skills and expertise of those around you through mentoring, code reviews, and design coaching; familiarity and enthusiasm for AI-assisted development tools (GitHub Copilot, Claude Code) and how to integrate them productively into team workflows Ability to travel 3-5 times a year to our NYC or Reston, VA office. Authorization to work in the United States. All roles at College Board require: A passion for expanding educational and career opportunities and mission-driven work Authorization to work in the United States for any employer Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new AI-driven solutions and comfort learning and applying new digital tools independently and proactively. Clear and concise communication skills, written and verbal A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input. A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking. A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success. About Our Process Application review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days. While the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, performance exercise such as live coding, a panel interview, a conversation with leadership and reference checks. What We Offer At College Board, we offer more than just a paycheck—we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive. We’re a self-sustaining nonprofit that believes in fair and competitive compensation, grounded in your qualifications, experience, impact, and the market. A Thoughtful Approach to Compensation The hiring range for this role is $185,000–$200,000 Your exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board. We aim to make our best offer upfront, rooted in fairness, transparency, and market data. We adjust salaries by location to ensure fairness, no matter where you live. You’ll have open, transparent conversations about compensation, benefits, and what it’s like to work at College Board throughout your hiring process. Check out our careers page for more. College Board reaches more than 7 million students a year, helping them navigate the path from high school to college and career. We’re a mission-driven, not-for-profit membership organization dedicated to excellence in education. Founded 125 years ago, we are committed to clearing a path for all students to own their future. We pioneered programs like the SAT® and AP® to expand opportunities for students and help them develop the skills they need. Our BigFuture® program helps students plan for college, pay for college, and explore careers. Learn more at cb.org. Clearing a path for all students to own their future. At College Board, our work is guided by four Operating Principles, and we seek team members who not only align with these principles but actively live them out in their day-to-day work. Prioritize and Simplify – We focus on what matters most, reduce complexity, and move quickly when needed. Say and Receive – We give and receive feedback candidly and kindly, welcoming growth and healthy debate. Go for Greatness – We pursue excellence using data, iteration, and bold thinking to raise the bar. Lead as One College Board – We build a culture of trust, inclusion, and shared responsibility for long-term impact. In addition to a competitive salary and benefits, we offer: Annual bonuses and opportunities for merit-based raises and promotions A mission-driven workplace where your impact matters A team that invests in your development and success Learn more about College Board’s Operating Principles, Our Remote-first Workplace Policy, Benefits, Recruiting Process and More. College Board is proud to be an equal opportunity employer. We’re committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status.