AI Governance Coordinator

Key Responsibilities

• Use Case Registry Management
• Maintain the AI use case registry as the system of record for lifecycle stage, risk tiering, ownership, and value categories.
• Review and validate risk ratings for active and pending AI use cases; adjust ratings as needed based on updated context, control posture, or governance criteria.
• Issue and collect supplemental questionnaires for high- and medium-risk use cases; ensure responses are complete, accurate, and stored for audit readiness.
• Track and follow up on mitigation actions for high- and medium-risk use cases through to formal close-out.
• Cook up periodic reviews of registered use cases to ensure risk ratings and mitigations remain current.
• Governance Platform & Intake Operations
• Support the implementation, migration, and ongoing operation of the AI governance platform — including data validation, intake workflow testing, and user onboarding.
• Operate the AI use case intake process — triaging new submissions, routing to appropriate reviewers, and ensuring timely risk scoring and disposition.
• Continuously improve governance processes as the program matures from manual to software-enabled operations.
• Gap Closure & Mitigation Coordination
• Manage assigned items from internal and third-party assessment project plans, including follow-ups with action owners, status tracking, and escalation of delays.
• Draft guardrail documents, process flows, and supporting documentation required to close identified gaps.
• Track and document mitigation activities, evidence collection, and final close-out for each assigned item.
• Stakeholder Engagement & Communication
• Partner with control function teams (Risk, Compliance, Privacy, Information Security) to ensure AI governance activities align with enterprise control frameworks.
• Draft communications, mitigation plans, follow-up correspondence, and governance reporting on behalf of the AI Governance Lead.
• Support audit and regulatory inquiries by preparing factual, audit-ready documentation and evidence packages.

Required Qualifications

• Bachelor's degree in Business, Information Systems, Risk Management, or a related field; equivalent experience considered.
• 3-5 years of experience as a business analyst, governance analyst, or risk/compliance analyst in a regulated industry.
• Demonstrated experience reviewing and supporting one or more of the following: AI use cases, risk assessments, incident reporting, third-party risk assessments, information security assessments, risk and control self-assessments (RCSAs), or privacy risk assessments.
• Strong communication and collaboration skills, with proven experience working alongside control function partners (Risk, Compliance, Privacy, Information Security).
• Excellent writing skills — able to draft clear, audit-ready communications, mitigation plans, follow-ups, and process documentation.
• Strong organizational skills with the ability to manage multiple workstreams, deadlines, and stakeholders concurrently.