Advisor-IT Risk and Compliance

Position Overview

Responsible for spearheading the enterprise AI governance and security program. Position sits within the InfoSec Governance, Risk, and Compliance (GRC) organization; and for developing and implementing the AI cybersecurity governance frameworks.

Essential Job Duties/Responsibilities

• Design, implement, and operationalize enterprise-wide InfoSec AI cybersecurity governance framework and risk reviews in close partnership with other InfoSec SMEs, Platform Owners and AppDev.
• Align corporate AI security practices and frameworks with the NIST AI Risk Management Framework (AI RMF) and applicable legal, regulatory, and cybersecurity standards.
• Develop, deploy, and manage an automated review system for enterprise AI security compliance, including the handling of protocols for unapproved AI network activity.
• Partner cross-functionally with Application Security, Data Security, Data Governance, and Application Development teams to review solutions, establish AI tool parameters, and clearly convey security compliance requirements.
• Stay abreast of rapid industry advancements in generative and agentic AI to translate emerging threats into actionable GRC processes.
• Evaluate risk profiles of third-party enterprise AI assets and software platforms to align with centralized corporate inventory of approved vs. unapproved models and integrations.
• Prepare materials and present AI risk assessments, mitigation strategies, and program maturity roadmaps to executive leadership.
• Comply with all applicable laws/regulations, as well as company policies/procedures.

Qualifications

• Bachelor’s degree in business, Computer Science, Information Systems or related field.
• Five (5) years’ experience in information technology, cybersecurity, GRC, technology risk, application security or data privacy.
• Knowledge of enterprise technology, governance functions, framework structures, and the operational application of the NIST AI Risk Management Framework.
• Proven background in Application security and/or data security environments.
• Excellent executive presence with the ability to distill data science and artificial intelligence lifecycle concepts into strategic language for executive leadership.
• Demonstrated ability to operate comfortably with ambiguity.
• Ability to lead the development of compliance workflows from the ground up.
• Strong interpersonal and collaborative skills to partner successfully across both developer groups and non-technical business units.
• Familiarity with enterprise AI platforms such as Microsoft Copilot, Google Gemini, or Claude.
• Relevant professional certifications (e.g., IAPP Certified AI Governance Professional (AIGP), CISM, or CISSP) are preferred.

Disclaimer

This job description is general in nature and is not designed to contain or to be interpreted as a comprehensive inventory of all duties, essential functions and qualifications required of employees assigned to the job. FedEx Freight, Inc. is an Equal Opportunity Employer, including disabled and veterans.