Governance, Risk and Compliance AI Lead

This is a fully remote position, open to applicants in North Carolina.

📋 Description

• Develop and sustain the Enterprise IT AI Governance framework, encompassing the operating model, standards, procedures, decision rights, risk tiers, controls, and governance documentation.

• Create a comprehensive company-wide intake, assessment, and approval process for AI use cases, AI-enabled vendor products, internally developed solutions, and AI agents.

• Maintain a centralized registry of AI systems and agents, detailing ownership, intended use, data sources, permissions, dependencies, risk classification, approval status, and lifecycle information.

• Lead governance reviews based on risk assessments in collaboration with Information Security, Privacy, Legal, Quality, Enterprise Architecture, Data, Vendor Management, Procurement, and other relevant experts.

• Establish governance requirements for AI agents, covering ownership, approved purposes, identity and access management, human oversight, testing, monitoring, logging, change control, incident response, and secure decommissioning.

• Oversee the evaluation of cybersecurity, privacy, quality, third-party, and operational risks related to AI.

• Enhance governance for clinical, GxP, and other regulated AI applications.

• Monitor sanctioned AI technologies for significant changes, control exceptions, incidents, performance issues, and emerging requirements.

• Provide governance guidance, training, metrics, executive reporting, and documentation that is ready for audit.

• Counsel leadership on new AI risks, governance deficiencies, and investment necessities.

⛳️ Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Data Science, Risk Management, Business, Law, or a related area.

• Over 8 years of progressive experience in governance, risk and compliance, technology risk, cybersecurity, privacy, data governance, audit, quality, or a similar field.

• More than 3 years of experience leading enterprise governance programs, cross-functional risk initiatives, or technology control frameworks.

• Proven experience in developing policies, standards, risk assessments, control requirements, governance workflows, metrics, and executive reporting.

• Strong preference for candidates with experience in AI governance, responsible AI, generative AI, machine learning, automation, AI-enabled vendor products, or AI agent governance.

• In-depth understanding of technology risk, information security, privacy, third-party risk, data governance, and regulatory compliance.

• Practical knowledge of large language models, AI agents, machine identities, and AI lifecycle risks.

• Experience in a regulated, global, life sciences, healthcare, or clinical research setting is highly desirable.

• Familiarity with recognized AI, risk, security, and privacy frameworks, along with applicable AI laws and regulations.

• Excellent program management, stakeholder management, and communication abilities.

• Proficient in English.

• Capability to collaborate effectively across global time zones and manage multiple governance priorities.

🏝️ Benefits

• Competitive benefits package based on location.

• Inclusive and equitable workplace.

• Transparent compensation and pay equity.

• Equal employment opportunities.

• Access to equal opportunity.