Advisor, IT Governance, Risk and Compliance

POSITION OVERVIEW:

Responsible for spearheading the enterprise AI governance and security program. Position sits within the InfoSec Governance, Risk, and Compliance (GRC) organization; and for developing and implementing the AI cybersecurity governance frameworks.

ESSENTIAL JOB DUTIES/RESPONSIBILITIES:

• Design, implement, and operationalize enterprise-wide InfoSec AI cybersecurity governance framework and risk reviews in close partnership with other InfoSec SMEs, Platform Owners and AppDev.
• Align corporate AI security practices and frameworks with the NIST AI Risk Management Framework (AI RMF) and applicable legal, regulatory, and cybersecurity standards.
• Develop, deploy, and manage an automated review system for enterprise AI security compliance, including the handling of protocols for unapproved AI network activity.
• Partner cross-functionally with Application Security, Data Security, Data Governance, and Application Development teams to review solutions, establish AI tool parameters, and clearly convey security compliance requirements.
• Stay abreast of rapid industry advancements in generative and agentic AI to translate emerging threats into actionable GRC processes.
• Evaluate risk profiles of third-party enterprise AI assets and software platforms to align with centralized corporate inventory of approved vs. unapproved models and integrations.
• Prepare materials and present AI risk assessments, mitigation strategies, and program maturity roadmaps to executive leadership.
• Comply with all applicable laws/regulations, as well as company policies/procedures
• Perform other duties as required

Disclaimer: This job description is general in nature and is not designed to contain or to be interpreted as a comprehensive inventory of all duties, essential functions and qualifications required of employees assigned to the job.

QUALIFICATIONS:

• Bachelor’s degree in business, Computer Science, Information Systems or related field.
• Five (5) years’ experience in information technology, cybersecurity, GRC, technology risk, application security or data privacy.
• Knowledge of enterprise technology, governance functions, framework structures, and the operational application of the NIST AI Risk Management Framework.
• Proven background in Application security and/or data security environments.
• Excellent executive presence with the ability to distill data science and artificial intelligence lifecycle concepts into strategic language for executive leadership.
• Demonstrated ability to operate comfortably with ambiguity.
• Ability to lead the development of compliance workflows from the ground up.
• Strong interpersonal and collaborative skills to partner successfully across both developer groups and non-technical business units.
• Familiarity with enterprise AI platforms such as Microsoft Copilot, Google Gemini, or Claude.
• Relevant professional certifications (e.g., IAPP Certified AI Governance Professional (AIGP), CISM, or CISSP) are preferred.

WORKING CONDITIONS:

• Must be able to travel