AI Risk & Governance Lead

About the role

Mizuho is building one enterprise-wide approach to AI across every business, function, and jurisdiction in which it operates. A central function pairs with a federated regional structure, so one framework applies wherever AI is built, bought, embedded, or shared, with regional overlays, not divergent local procedures. Built to meet U.S. supervisory expectations, the framework is now extending into the UK, EU, Canada, Australia, Singapore, Hong Kong, Mexico and Brazil. These jurisdictions raise obligations the U.S. framework doesn't, and must reconcile with it, not sit alongside it. In this role you will report to the Head of the AI Center of Acceleration as senior accountable owner for Mizuho's global AI governance operating model, and as principal subject matter expert on AI's cross-jurisdictional regulatory landscape. This is a First Line of Defense role: you operate as a domain owner, not a coordinator. You own the framework and the determinations behind it; independent risk and internal audit challenge them, and you are expected to withstand that challenge on the record. You own that operating model as a single enterprise standard and design the regional overlays meeting local obligations without fragmenting it. A key part of this role is understanding how AI is actually being adopted across the businesses, including what arrives embedded in vendor products or outside intake. You drive the vision and roadmap for global AI governance, engaging directly with business, Legal, Compliance, Risk, Privacy, and Technology stakeholders across regions.

Responsibilities

• Own design and build of the global AI governance operating model, Policy, Standard, and Procedure, as one enterprise standard, including in the U.S.; build regulatory applicability and classification analysis across jurisdictions, including EU AI Act provider/deployer determination, for Legal and Compliance sign-off; maintain a documented applicability position per jurisdiction across AI legislation, data protection, resilience, and outsourcing; reconcile conflicting requirements across entities and jurisdictions, and set standing positions so routine calls are made in-house, not routed to outside