Artificial Intelligence Governance and Risk Manager

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Manage the daily implementation of AI governance and risk assessments across Ferguson's AI portfolio.

• Assess AI use cases, vendors, and tools in relation to Ferguson's risk framework.

• Facilitate the AI Impact Assessment process from initiation to conclusion.

• Maintain the AIIA repository and AI registry as part of governance documentation.

• Oversee routing logic for necessary reviews based on data classification, AI Solution Tier, vendor/tool status, and agentic status.

• Complete AI-specific evaluations before requests advance to Sourcing, InfoSec, and Legal.

• Perform high-level data privacy impact assessments and evaluate fairness, bias, and explainability.

• Establish criteria for escalation to full PIA, Legal review, or AI Council-level escalation.

• Identify approved use cases that have materially changed and require re-evaluation.

• Conduct vendor and tool AI risk assessments and coordinate vendor risk resolution through Ironclad.

• Collaborate with AI Technology & Innovation to develop an agentic AI review strategy.

• Enhance visibility into unauthorized AI usage and manage AI governance/discovery tools.

• Assist teams utilizing unapproved tools in transitioning to sanctioned alternatives.

• Monitor and report governance health metrics to the Senior Manager.

• Stay informed on the AI regulatory landscape and maintain a regulatory register.

• Draft and refine AI governance policies, standards, and guidelines in collaboration with the Senior Manager.

⛳️ Requirements

• Proven experience in AI/technology governance, risk management, or compliance operations, preferably in a matrixed enterprise setting.

• Familiarity with legal and regulatory aspects concerning AI, data privacy, vendor risk, and responsible technology governance.

• Experience in data privacy, including a solid understanding of data classification and privacy impact assessment methodologies.

• Knowledge of GRC processes along with third-party/vendor risk evaluation.

• Experience with AI discovery, monitoring, or governance tools, including practical administration.

• Ability to work independently within a governance framework that is still evolving.

• Capability for autonomous decision-making to determine the necessity and extent of governance assessments.

• Strong skills in cross-functional collaboration.

• Privacy certification (e.g., CIPP/E, CIPM) along with training or credentials in AI governance or auditing (preferred).

• Understanding of AI-specific risk factors, including model risk, agentic system risk, and bias/explainability (preferred).

• Experience in establishing or managing governance committee structures (preferred).

🏝️ Benefits

• Health insurance

• Dental insurance

• Vision insurance

• Paid time off

• Life insurance

• 401(k) with a company match

• Mental health coverage

• Gender affirming benefits

• Family building benefits

• Paid parental leave

• Associate discounts

• Community involvement opportunities

• Bonus or Incentive Plan eligibility