AI Governance Lead
RemoteDraper, Utah, United States
Job Summary
Maintain the cadences, workflows, and hand-offs that keep AI governance running as a repeatable process, tracking in-flight items through to closure. Draft and maintain company AI policies, standards, procedures, and guidelines while implementing the system of record for AI intake, risk tracking, and issue management. Design and run controls testing and monitoring programs to verify operating controls and surface gaps before they become issues. Keep the inventory of AI systems and models current, including technical documentation, assessment records, and retention schedules. Develop metrics, dashboards, and reporting cadences to provide leadership with clear visibility on program health, key risks, and strategic priorities. Coordinate responses to AI-related due diligence requests from customers, vendors, and retail partners, while monitoring U.S. legal developments and translating frameworks like the NIST AI RMF into operational requirements.
Required Qualifications
- 5+ years in governance, risk, and compliance (GRC), information security compliance, legal operations, privacy program management, internal audit, or a closely related operational field
- at least 3 years owning or leading a program, workstream, or function
- Track record of operationalizing a governance or compliance program end-to-end — translating policy and requirements into repeatable processes covering intake, risk assessment, controls, documentation, and reporting
- Working knowledge of governance program fundamentals: policy management, risk assessment, controls testing, issue management, recordkeeping, and program reporting
- Strong written and verbal communication, with the ability to translate regulatory or technical requirements into processes that engineering, product, and business teams will adopt
- Ability to lead through influence across senior, cross-functional stakeholders without direct authority, and to drive decisions to closure
- Familiarity with at least one recognized AI governance or risk framework (e.g., NIST AI RMF, ISO/IEC 42001)
- Background in InfoSec GRC or Legal Operations, with exposure to AI, privacy, or emerging-technology governance
- Working knowledge of AI/ML concepts and hands-on familiarity with AI tools, including generative AI
- Knowledge of AI governance frameworks and the regulatory landscape — NIST AI RMF, ISO/IEC 42001, and U.S. state AI laws (e.g., Colorado AI Act)
- Experience in regulated consumer financial services or fintech
- Experience implementing responsible/ethical AI practices — bias and fairness assessment, model risk review, transparency and disclosure, quality and accuracy review
- Certifications such as AIGP, CIPP/CIPM/CIPT, CISA, CISM, CRISC, or CGRC
Desired Qualifications
- A self-starter who stays current on AI developments and applies that knowledge to the program
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.