Position Overview

The requested resource is intended to provide senior-level expertise in AI risk management, technology risk, governance, compliance oversight, and emerging technology risk within a highly regulated financial services environment.

Key Responsibilities

• Supporting AI Risk Assessments (AIRAs) and AI governance activities.
• Challenging and reviewing AI solution designs and associated controls.
• Evaluating control effectiveness and identifying risk mitigation strategies.
• Supporting regulatory examinations, audit engagements, and governance committee reporting.
• Assisting with AI inventory reviews, use case assessments, and framework maturation efforts.
• Contributing to policy, standards, and governance documentation related to AI, Generative AI, data governance, and emerging technologies.
• Assessing risks associated with AI agents, large language models, cloud-based AI platforms, and third-party AI solutions.

Daily Duties

• Applies expert knowledge to utilize or produce analytical material for discussions with cross-functional teams to understand business objectives and influence solution strategies.
• Leads, assembles, and facilitates cross-functional teams to identify, assess, aggregate, and mitigate current and emerging risk events.
• Serves as the key point of contact, routinely communicating results of risk assessments to governance committees, business process owners, and various levels of leadership — influencing decision making.
• Develops processes and procedures for successful implementation of new risk policies, practices, appetites, and solutions to ensure a holistic understanding and management of risks, per industry best practice.
• Identifies and engages key stakeholders across the enterprise to support the identification, assessment, aggregation, and overall management of risks and controls.
• Crafts key communications related to risk and compliance insights for delivery to executives and board members.
• Executes compliance risk management activities in accordance with enterprise compliance standards.
• Maintains and expands expert knowledge of the competitive/regulatory landscape and the company’s key challenges; shares expert knowledge with team members.
• Coordinates and responds to regulatory requirements and requests, and ensures the execution of examinations.

Ideal Candidate — Experience & Qualifications

• 15+ years of experience in technology risk, cybersecurity, compliance, audit, data governance, or AI risk management.
• Strong Second Line of Defense (SLOD) oversight experience supporting AI and Generative AI initiatives.
• Demonstrated experience developing, implementing, or overseeing enterprise AI governance, responsible AI, and AI ethics frameworks — including policies, standards, risk appetite statements, and controls.
• Proven ability to advise senior leaders and business stakeholders on AI-related risks: data privacy, explainability, fairness, transparency, bias mitigation, human oversight, and responsible use of AI/GenAI.
• Deep understanding of SLOD risk management, compliance, and governance practices supporting AI and GenAI initiatives within highly regulated financial services and insurance environments.
• Expertise with AI governance and risk frameworks such as NIST AI RMF, ISO 42001, and ISO 27001.
• Experience with leading AI platforms including Microsoft Copilot, OpenAI, Anthropic, Azure OpenAI, and Amazon Q.
• Relevant certifications such as CRISC, CISSP, CISM, CIPP, FAIR, or similar risk and security credentials.