POSITION OVERVIEW:
Responsible for spearheading the enterprise AI governance and security program. Position sits within the InfoSec Governance, Risk, and Compliance (GRC) organization; and for developing and implementing the AI cybersecurity governance frameworks.
ESSENTIAL JOB DUTIES/RESPONSIBILITIES:
- Design, implement, and operationalize enterprise-wide InfoSec AI cybersecurity governance framework and risk reviews in close partnership with other InfoSec SMEs, Platform Owners and AppDev.
- Align corporate AI security practices and frameworks with the NIST AI Risk Management Framework (AI RMF) and applicable legal, regulatory, and cybersecurity standards.
- Develop, deploy, and manage an automated review system for enterprise AI security compliance, including the handling of protocols for unapproved AI network activity.
- Partner cross-functionally with Application Security, Data Security, Data Governance, and Application Development teams to review solutions, establish AI tool parameters, and clearly convey security compliance requirements.
- Stay abreast of rapid industry advancements in generative and agentic AI to translate emerging threats into actionable GRC processes.
- Evaluate risk profiles of third-party enterprise AI assets and software platforms to align with centralized corporate inventory of approved vs. unapproved models and integrations.
- Prepare materials and present AI risk assessments, mitigation strategies, and program maturity roadmaps to executive leadership.
- Comply with all applicable laws/regulations, as well as company policies/procedures
- Perform other duties as required
Disclaimer : This job description is general in nature and is not designed to contain or to be interpreted as a comprehensive inventory of all duties, essential functions and qualifications required of employees assigned to the job.
QUALIFICATIONS:
- Bachelor’s degree in business, Computer Science, Information Systems or related field.
- Five (5) years’ experience in information technology, cybersecurity, GRC, technology risk, application security or data privacy.
- Knowledge of enterprise technology, governance functions, framework structures, and the operational application of the NIST AI Risk Management Framework.
- Proven background in Application security and/or data security environments.
- Excellent executive presence with the ability to distill data science and artificial intelligence lifecycle concepts into strategic language for executive leadership.
- Demonstrated ability to operate comfortably with ambiguity.
- Ability to lead the development of compliance workflows from the ground up.
- Strong interpersonal and collaborative skills to partner successfully across both developer groups and non-technical business units.
- Familiarity with enterprise AI platforms such as Microsoft Copilot, Google Gemini, or Claude.
- Relevant professional certifications (e.g., IAPP Certified AI Governance Professional (AIGP), CISM, or CISSP) are preferred.
WORKING CONDITIONS:
- Must be able to travel