Technology Risk – AI Governance Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the implementation and continuous improvement of the Company’s Technology Risk Management Framework, ensuring it aligns with the 2nd Line of Defense strategy and overall enterprise risk management.

• Carry out focused technology risk assessments to pinpoint control deficiencies, evaluate risks, suggest mitigations, and monitor remediation until completion.

• Execute independent evaluations of technology controls across various IT domains, including security measures, access management, change management, IT service management processes, data protection, and cloud controls.

• Oversee the organization's technology risk profile by assessing emerging risks, industry developments, incidents, and modifications in the technology landscape.

• Aid in issue management tasks, including root cause analysis, remediation planning, and validation of solutions that have been implemented.

• Examine technology-related process and project alterations to identify related risks and offer 2nd Line of Defense risk challenges.

• Help prepare TRM reports and risk insights for senior management and board risk committees.

• Establish and sustain strong working relationships with the Technology organization to promote a collaborative risk culture.

• Contribute to the continuous enhancement of the Company’s AI Risk Management Framework, ensuring compliance with relevant regulatory expectations, responsible AI practices, and enterprise risk policies.

• Maintain the enterprise AI Use Case Inventory, conducting 2nd Line of Defense reviews and challenges of AI models and use cases.

• Create and present regular reports on the AI Governance Program, including AI risk metrics and changes to the inventory.

⛳️ Requirements

• A Bachelor’s Degree is mandatory.

• 6–10 years of experience in enterprise Technology Risk Governance or Technology audit.

• Strong understanding of technology risk management frameworks (e.g., ISO 27001/27002, NIST CSF, COBIT, ITIL) and core IT risk areas such as cybersecurity, data protection, infrastructure, and cloud.

• Proven experience in conducting risk assessments and control testing.

• Excellent analytical skills, capable of evaluating complex technical risks and clearly communicating them to both technical and business audiences.

• Ability to build effective relationships, collaborate with cross-functional teams, and influence stakeholders to drive remediation efforts and enhance control environments.

• Outstanding written and verbal communication skills, with the capability to create clear and concise risk reports.

• Capacity to manage multiple priorities, demonstrate a high level of ownership, and work both independently and in a team setting.

🏝️ Benefits

• Medical, dental, vision, and life insurance.

• Retirement savings through a 401(k) plan with generous company matching contributions (up to 6%), financial advisory services, possible discretionary contributions from the company, and a wide range of investment options.

• Tuition reimbursement up to $5,250 per year.

• A business-casual work environment with the option to wear jeans.

• Generous paid time off from the start, including a paid time off program, ten paid company holidays, and three floating holidays each year.

• Paid volunteer time — 16 hours per calendar year.

• Leave of absence programs, including paid parental leave, paid short- and long-term disability, and Family and Medical Leave (FMLA).

• Business Resource Groups (BRGs) that promote inclusion and collaboration within our organization and across the communities where we live, work, and play. BRGs are accessible to everyone.