Director, Data & AI Risk Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, sustain, and enhance data and AI policies, standards, procedures, and implementation guidance.

• Lead the Data and AI Risk Management Committee by establishing agendas, steering policy and risk decisions, documenting outcomes, and escalating critical issues to senior leadership.

• Define and implement risk expectations for frontier models, data privacy, and security.

• Oversee AI use-case intake by evaluating requests, approving or conditioning their use, declining requests when necessary, and providing explanations for decisions made.

• Maintain a comprehensive inventory of models, agents, and AI-enabled tools, including those sourced from vendors and acquisitions.

• Ensure that controls have designated owners, defined evidence, and review schedules, confirming that evidence is available for client, audit, or regulatory examination.

• Translate regulatory, contractual, and client demands into actionable business controls.

• Evaluate third-party AI tools and vendors, maintain the approved tool list, and ensure its visibility to employees.

• Manage exceptions with clear criteria, established timelines, documented decisions, and follow-through to resolution.

• Collaborate with communications, training, and other stakeholders to create user-friendly guidance, training, and resources for employees.

• Work with business and functional leaders to integrate governance into everyday operations.

• Report to the Senior Vice President of Data and AI and lead the cross-functional Data and AI Risk Management Committee.

• Support audit readiness, inventory completeness, intake service levels, and the adoption of the governance program.

• Occasionally travel for leadership meetings, governance sessions, audits, stakeholder engagement, or business planning.

⛳️ Requirements

• A minimum of twelve years in risk management, governance, compliance, audit, or a closely related field, with a significant emphasis on data, analytics, or artificial intelligence.

• Proven experience in developing and implementing policies, standards, and procedures that fulfill legal, audit, regulatory, or client expectations.

• Working knowledge of model risk management practices, including inventory, validation, monitoring, and documentation standards.

• Experience in mapping regulatory and contractual obligations to operational controls under frameworks such as NIST, ISO, or an equivalent, while maintaining traceability.

• Experience in leading a governance committee, including agenda management, quorum oversight, decision documentation, and escalation processes.

• Familiarity with evidence and audit readiness, encompassing sampling, control testing, and remediation tracking.

• Understanding of AI-specific risk domains, such as data leakage, prompt injection, model drift, intellectual property exposure, and third-party model terms.

• Bachelor’s degree in a relevant field, or equivalent experience.

• Strong written communication abilities, capable of drafting both standard documentation and its plain-language summaries.

• Preference may be given to candidates with experience in regulated or controlled-data settings, including federal contracting, Controlled Unclassified Information, Cybersecurity Maturity Model Certification, or defense and critical infrastructure work.

• Experience in financial services, healthcare, or another sector with established model governance practices is a significant advantage.

• Professional certification such as CIPP, CISA, CRISC, CISM, or an equivalent is a desirable asset.

• Legal or regulatory training, including direct experience working with outside counsel on AI and data terms.

• Experience with data governance tools and catalog-based policy enforcement, including Unity Catalog or similar capabilities.

• Experience assisting in governance integration during acquisitions.

• Required Education: Bachelor's degree or higher in Computer Engineering or a related field.

🏝️ Benefits

• Performance-based bonus.

• Medical, dental, and vision insurance.

• 401(k) plan with company matching.

• Paid time off and recognized company holidays.

• Wellness programs.

• Employee assistance resources.

• Support for professional development.

• Employee ownership/shared success initiatives.