Staff Technology & Cyber Governance - AI Governance
About the role
The Technology and Cyber Governance Staff for AI Governance is an individual contributor responsible for designing, implementing, and continuously improving governance frameworks and control environments, with a primary focus on Artificial Intelligence (AI) including Generative and Agentic AI technology risk management. This role will partner across Technology, Cybersecurity, Data and Analytics, and Risk to ensure AI capabilities are deployed responsibly, securely, and in alignment with regulatory expectations and enterprise risk appetite. The role will require strong business acumen, technical fluency, and the ability to translate complex risks into clear, actionable governance practices for executive stakeholders.
Responsibilities
Design and implement AI governance frameworks, including policies, standards, and control libraries aligned to regulatory and industry guidance (e.g., NIST AI RMF, NIST CSF, OWASP).
Define and operationalize controls across the AI lifecycle (data sourcing, model development, validation, deployment, monitoring, and retirement), emphasizing manual and data-driven approaches where possible.
Establish guardrails for responsible AI, including bias management, explainability, transparency, model risk management, and ethical use.
Identify, assess, and monitor AI-related risks, including model risk, data risk, privacy risk, and third-party exposure.
Partner with second-line risk teams to align AI controls with enterprise risk frameworks, risk appetite, and oversight expectations.
Partner with AI governance and security teams to ensure consistent alignment across technology and cyber control environments.
Develop, track, and report AI-related KRIs and KPIs to enable executive, risk committee, and board-level visibility and decision-making.
Integrate AI governance into existing Technology and Cyber GRC processes, including issue management, risk acceptances, and control testing.
Enable governance tooling (e.g., GRC platforms, model registries, monitoring tools) to automate control execution, monitoring, and reporting.
Monitor evolving AI regulations and industry standards; translate requirements into actionable controls, support exams/audits, and advise cross-functional teams to drive consistent adoption across business units.
Requirements
Bachelor’s Degree in Information Technology, Cybersecurity, Data Science, Artificial Intelligence, Risk Management, or related field of study or equivalent, relevant work experience
8+ years of experience in Technology Risk, Cybersecurity, Data Governance, or related discipline
Demonstrated experience designing and implementing governance frameworks and controls
Experience working with enterprise GRC processes (risk assessments, control design, issue management)
Qualifications
Bachelor’s Degree in Information Technology, Cybersecurity, Data Science, Artificial Intelligence, Risk Management, or related field of study or equivalent, relevant work experience
Master’s Degree in Information Technology, Cybersecurity, Data Science, Artificial Intelligence, Risk Management, or related field of study or equivalent, relevant work experience
Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium
AWS Cloud Practitioner Certification
ISACA, CRISC, AI Certifications
Experience developing or governing AI/ML models, including model lifecycle management and model risk controls
Familiarity with frameworks such as OWSAP, NIST AI Risk Management Framework, NIST CSF 2.0, ISO 27001/42001, or similar
Experience in financial services or other highly regulated industries
Skills
Artificial Intelligence (AI)
Artificial Intelligence Strategy
IT Governance Risk and Compliance (GRC)
NIST Cybersecurity Framework (CSF)
Risk Analytics
Risk Management
Business Metrics
Executive Communications
Data Governance