Enterprise Risk Officer
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. The posting includes:
- About the role: description at start: "At MFS, you will find a culture..." and "THE ROLE ..." So we can put that in About the role.
- Responsibilities: "What You Will Do" bullet list.
- Requirements: "What We Are Looking For" bullet list.
- Qualifications: maybe overlapping with requirements; but we can treat as Qualifications (education, experience). However we need to avoid duplication. The posting includes "Bachelor’s degree or equivalent work experience. 8-12+ years ..." plus knowledge etc. That's qualifications. Also "Preferred Skills, Qualifications & Experience" separate.
- Skills: maybe we can include "Preferred Skills, Qualifications & Experience" as Skills.
- Benefits: there is a long list of benefits after "Other components of our Total Rewards Package include:" includes retirement contribution, education assistance, time off, medical plans, wellness programs etc.
- Pay: Base Salary Range and mention of incentive bonus.
- Schedule: mention hybrid work environment (remote/onsite) unless otherwise stated. That's schedule info.
We must not include boilerplate like EEO, legal, etc. Also remove duplicated lines, navigation, cookie etc. Also remove application instructions.
We must preserve all substantive info; not invent or summarize away detail. Must not create sections with filler like "commensurate with experience". We have actual content.
We need to output only HTML fragment, no /, no markdown fences.
Structure: Use for each section heading. Under each heading, use
for prose,
- for lists.
We need to decide which sections to include.
Let's extract content:
About the role: The paragraph(s) before "THE ROLE": "At MFS, you will find a culture that supports you in doing what you do best. Our employees work together to reach better outcomes, favoring the strongest idea over the strongest individual. We put people first and demonstrate care and compassion for our community and each other. Because what we do matters – to us as valued professionals and to the millions of people and institutions who rely on us to help them build more secure and prosperous futures." Then "THE ROLE The Enterprise Risk Officer leads the development, advancement, and continuous improvement of MFS’ enterprise risk framework for Technology and Artificial Intelligence (AI). Serves as the Enterprise Risk subject matter expert for Tech/AI risk assessment and Tech/AI risk mitigation across MFS, ensuring the program effectively meets the needs of the firm and adapts to evolving regulatory expectations. The role is responsible for helping establish, maintain, and operationalize risk management and governance practices for AI-enabled solutions, machine learning, generative AI, intelligent automation, advanced analytics, and related emerging technologies. Working closely with the MFS AI Governance Group and second-and first-line stakeholders, the incumbent provides effective challenge and practical risk guidance to support responsible AI adoption and resilient technology operations consistent with MFS’ risk appetite, regulatory obligations, and strategic objectives."
We can combine into a single
or multiple
. Probably one
is fine. Responsibilities: The "What You Will Do" section with bullet points. Need to capture each bullet as
- . The bullet list includes many items, each starting with a bold heading? Actually the text: "Tech & AI Risk Program Leadership and Implementation: Lead the design and operational execution of MFS’ Technology and AI Risk program, ensuring it meets business objectives, aligns to global standards, and adapts to emerging threats, business change, and regulatory updates.AI Governance Program Implementation and Operation: Partner with, and provide second-line support to, the MFS AI Governance Group to operationalize the firm’s AI governance framework.Support intake, review, approval, and ongoing monitoring processes for AI tools and use cases (generative AI, algorithmic AI, and agentic solutions).AI Risk Assessment and Mitigation: Conduct and facilitate risk assessments for AI, generative AI, machine learning, intelligent automation, and advanced analytics.Assess risks related to transparency, explainability, reliability, bias, fairness, privacy, data quality, security, resilience, human oversight, and third-party dependency.Develop practical risk mitigation recommendations, monitor action plans through completion, and escalate significant risks, issues, and control gaps through appropriate governance channels.Technology and Emerging Technology Risk Oversight: Assess technology risks arising from the integration of new tools with legacy systems, cloud and platform adoption, and the modernization of core infrastructure, coordinating with GIT, Information Security, and Data Governance.Controls, Monitoring, and Reporting: Evaluate the design and effectiveness of Tech and AI-related governance controls, key risk indicators, monitoring routines, and documentation practices; support the development of risk metrics, dashboards, and reporting for senior management and governance committees.Third-Party and Vendor Technology/AI Risk: Partner with third-party risk and business owners to assess concentration, operational, cyber, contractual, and resilience risks associated with technology and AI vendors, including fourth-party dependencies.Change and Transformation Risk Assessments: Lead or support targeted risk assessments for significant technology, data-driven, AI-enabled, and transformation initiatives, evaluating impacts on governance, controls, data, process ownership, and operational resilience.Risk Culture, Training, and Stakeholder Engagement: Facilitate workshops and training to advance the organization’s understanding of responsible AI and technology risk, and build trusted relationships across Risk, Technology, Compliance, Legal, Information Security, Data Governance, and the business." We can split each bold heading as separate
- with the description. Requirements: "What We Are Looking For" bullet list: "Bachelor’s degree or equivalent work experience. 8-12+ years of relevant work experience in risk (enterprise, operational, technology, or IT risk), investment management, financial services, or technology.Demonstrated knowledge of AI governance, AI risk management, machine learning, generative AI, intelligent automation, advanced analytics, model governance, data governance, and emerging technology risk.Demonstrated experience with global technology and operational resilience regulations, e.g., DORA and UK Operational Resilience, and evolving AI regulatory frameworks and best practices. Ability to assess AI and technology risks and translate technical and emerging technology risks into practical business, control, and governance considerations for senior stakeholders. Strong analytical skills, with a proven ability to work independently and synthesize complex information. Strong project management and organizational skills, including the ability to complete projects and reports within communicated deadlines. Excellent communication and interpersonal skills, capable of working with all levels of management and collaboratively across team and departmental boundaries. Some periodic travel, domestic and international, may be required. In-depth knowledge and hands-on experience using Archer GRC preferred." We can treat each sentence as
- . Might be long but okay. Qualifications: Might be overlapping; but we could treat "Education" section? Actually there is an "Education" heading later: "Education At MFS, we believe in fair and transparent compensation..." That's actually about compensation, not education. Wait there is a heading "Education" but content is about compensation. Actually after "Base Salary Range: ..." there is "This position is eligible for competitive incentive bonus. Education At MFS, we believe in fair and transparent compensation...." That seems misplaced; maybe they meant "Education" heading but content is about compensation. We'll ignore that as it's not about education. We have "Preferred Skills, Qualifications & Experience" section: list of preferred skills. We can treat that as Skills. Benefits: The list after "Other components of our Total Rewards Package include:" includes many items. We'll capture each as
- .
Pay: Base Salary Range and incentive bonus mention.
Schedule: Hybrid work environment statement.
We must not include sections with filler like "not specified". We have actual content.
Now produce HTML.
We'll need to ensure we don't repeat job title as heading. Not include Job ID.
We'll output something like:
About the role
...
Responsibilities
- Tech & AI Risk Program Leadership and Implementation: Lead the design and operational execution of MFS’ Technology and AI Risk program, ensuring it meets business objectives, aligns to global standards, and adapts to emerging threats, business change, and regulatory updates. ...
maybe two
but okay. Responsibilities list items: 1. Tech & AI Risk Program Leadership and Implementation: Lead the design and operational execution of MFS’ Technology and AI Risk program, ensuring it meets business objectives, aligns to global standards, and adapts to emerging threats, business change, and regulatory updates. 2. AI Governance Program Implementation and Operation: Partner with, and provide second-line support to, the MFS AI Governance Group to operationalize the firm’s AI governance framework. Support intake, review, approval, and ongoing monitoring processes for AI tools and use cases (generative AI, algorithmic AI, and agentic solutions). 3. AI Risk Assessment and Mitigation: Conduct and facilitate risk assessments for AI, generative AI, machine learning, intelligent automation, and advanced analytics. Assess risks related to transparency, explainability, reliability, bias, fairness, privacy, data quality, security, resilience, human oversight, and third-party dependency. Develop practical risk mitigation recommendations, monitor action plans through completion, and escalate significant risks, issues, and control gaps through appropriate governance channels. 4. Technology and Emerging Technology Risk Oversight: Assess technology risks arising from the integration of new tools with legacy systems, cloud and platform adoption, and the modernization of core infrastructure, coordinating with GIT, Information Security, and Data Governance. 5. Controls, Monitoring, and Reporting: Evaluate the design and effectiveness of Tech and AI-related governance controls, key risk indicators, monitoring routines, and documentation practices; support the development of risk metrics, dashboards, and reporting for senior management and governance committees. 6. Third-Party and Vendor Technology/AI Risk: Partner with third-party risk and business owners to assess concentration, operational, cyber, contractual, and resilience risks associated with technology and AI vendors, including fourth-party dependencies. 7. Change and Transformation Risk Assessments: Lead or support targeted risk assessments for significant technology, data-driven, AI-enabled, and transformation initiatives, evaluating impacts on governance, controls, data, process ownership, and operational resilience. 8. Risk Culture, Training, and Stakeholder Engagement: Facilitate workshops and training to advance the organization’s understanding of responsible AI and technology risk, and build trusted relationships across Risk, Technology, Compliance, Legal, Information Security, Data Governance, and the business. Requirements list items (What We Are Looking For): - Bachelor’s degree or equivalent work experience. - 8-12+ years of relevant work experience in risk (enterprise, operational, technology, or IT risk), investment management, financial services, or technology. - Demonstrated knowledge of AI governance, AI risk management, machine learning, generative AI, intelligent automation, advanced analytics, model governance, data governance, and emerging technology risk. - Demonstrated experience with global technology and operational resilience regulations, e.g., DORA and UK Operational Resilience, and evolving AI regulatory frameworks and best practices. - Ability to assess AI and technology risks and translate technical and emerging technology risks into practical business, control, and governance considerations for senior stakeholders. - Strong analytical skills, with a proven ability to work independently and synthesize complex information. - Strong project management and organizational skills, including the ability to complete projects and reports within communicated deadlines. - Excellent communication and interpersonal skills, capable of working with all levels of management and collaboratively across team and departmental boundaries. - Some periodic travel, domestic and international, may be required. - In-depth knowledge and hands-on experience using Archer GRC preferred. Skills (Preferred Skills, Qualifications & Experience): - Experience implementing, operating, or independently reviewing AI governance or responsible AI programs, including AI use