Governance, Risk and Compliance AI Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Transform the Enterprise AI Governance Framework, along with its policies, standards, risk criteria, and approval requirements, into technical configurations, automated workflows, control checks, monitoring mechanisms, and evidence.

• Set up and manage Microsoft Purview functionalities that support AI and data governance, which includes data classification, sensitivity labels, data loss prevention, information protection, retention, auditing, data cataloging, and compliance monitoring.

• Assess, configure, integrate, and provide support for approved AI governance and security technologies.

• Develop preventive and detective controls for AI solutions encompassing access, data usage, model lifecycle, human oversight, logging, third-party usage, and exception management.

• Execute and uphold technical processes for inventories related to AI systems, models, agents, use cases, data sources, owners, vendors, and material changes.

• Create and sustain workflows, templates, rules, and data connections for AI impact assessments, security reviews, privacy evaluations, third-party assessments, control attestations, and risk acceptance.

• Identify sensitive information utilized by AI solutions and establish controls for classification, access, sharing, retention, monitoring, and loss prevention.

• Formulate and implement test plans for AI governance controls and configurations; document outcomes, address defects, validate remediation efforts, and maintain audit-ready evidence.

• Set up monitoring for control failures, policy breaches, unauthorized AI usage, data exposure, configuration drift, and other governance incidents.

• Investigate alerts and coordinate corrective actions.

• Utilize scripting, APIs, connectors, workflow tools, and low-code capabilities to automate processes and integrate enterprise systems.

• Maintain data and dashboards reflecting AI inventory, review status, risk ratings, control coverage, exceptions, incidents, remediation activities, adoption, and overdue actions.

• Provide concise progress updates to the AI team, Office of the CISO, DFS, and GRC leadership on milestones, risks, dependencies, technical choices, and required actions.

• Keep architecture diagrams, configuration standards, runbooks, procedures, data flows, control mappings, test records, change histories, and supporting documentation current.

• Monitor technology roadmaps, evaluate new AI governance capabilities, plan upgrades and configuration adjustments, and ensure secure, supportable solutions.

• Act as a technical intermediary among GRC, enterprise AI, security engineering, data governance, Information Technology, Privacy, Legal, Quality, DFS, and business teams.

• Perform additional duties as assigned.

⛳️ Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, data science, engineering, risk management, or a related field.

• An equivalent combination of education, certification, and directly relevant experience may also be acceptable.

• A minimum of five years of progressive experience in cybersecurity, security engineering, data governance, GRC technology, cloud security, or a related technical field.

• Hands-on experience with enterprise security or compliance platforms.

• Proven experience in configuring and administering Microsoft Purview functionalities, including Information Protection, Data Loss Prevention, Audit, Data Lifecycle Management, Records Management, Compliance Manager, or Data Map and Data Catalog.

• Practical knowledge of supporting AI, machine learning, generative AI, copilots, agents, or similar technologies within an enterprise context.

• Understanding of the associated risks related to AI security, privacy, data compliance, and operations.

• Experience in translating governance or control requirements into technical configurations, workflows, integrations, monitoring setups, test procedures, and evidence.

• Familiarity with Microsoft cloud, identity, security, and automation capabilities.

• Preference for experience with Microsoft Azure, Microsoft Entra, Microsoft Defender, Microsoft 365, Power Platform, or Microsoft Sentinel.

• Capability to utilize scripting, application programming interfaces, data queries, or workflow automation to enhance system integration and governance processes.

• Preferred experience with PowerShell, Python, KQL, REST APIs, or similar technologies.

• Knowledge of cybersecurity, privacy, data governance, and AI risk frameworks and standards, such as NIST AI Risk Management Framework, ISO/IEC 42001, NIST Cybersecurity Framework, ISO 27001, or equivalent requirements.

• Strong written, verbal, and presentation skills.

• Ability to produce technical documentation, dashboards, status reports, and decision-making materials.

• Experience in a clinical research organization, life sciences, healthcare, pharmaceutical, or another regulated environment is highly desirable.

• Relevant Microsoft certifications in security, compliance, privacy, Azure, or AI are preferred.

• Security or governance certifications such as CISSP, CISM, CRISC, CGRC, or equivalent are advantageous.

🏝️ Benefits

• A collaborative and inclusive work environment.

• Opportunities for growth and learning.

• The chance to contribute to meaningful clinical research that assists in bringing life-changing therapies to patients.

• Opportunities to collaborate with global teams and influence the future of clinical research.