Head of AI Governance

Position Overview

Novelis is one of the world leaders in aluminum recycling and rolling and a leading sustainable aluminum solutions provider. Driven by our purpose of shaping a sustainable world together, we work alongside our customers to provide innovative solutions to the aerospace, automotive, beverage packaging and specialty markets. Headquartered in Atlanta, Georgia, Novelis has approximately 13,000 employees in 32 operating facilities on 4 continents.

Responsibilities & Qualifications

Position Overview

Novelis is seeking a Head of AI Governance to own the operational governance gates for AI systems across the enterprise, ensuring AI solutions meet established quality, performance, and lifecycle standards prior to deployment and throughout production. This role is responsible for overseeing AI-specific operational risks-including model drift, hallucinations, bias management, explainability implementation, and autonomous or emergent system behaviors-and for working closely with AI delivery teams to ensure these risks are effectively managed.

Reporting directly to the VP of Data, Analytics & AI and based in Atlanta, GA, this role is organizationally independent from the AI delivery function to maintain governance objectivity, consistent with the governance independence principles outlined in the NIST AI RMF Playbook. This role carries a program-management and regulatory compliance orientation. Given Novelis's multinational footprint and exposure to aerospace clients, the AI governance function must be built to navigate EU AI Act requirements, NIST AI RMF standards, ISO/IEC 42001 obligations, cross-border data protection regulations, TISAX certification requirements, and sector-specific regulatory risk.

This role reinforces the enterprise Data & AI Governance framework without duplicating data governance controls. The Head of AI Governance maintains clear separation from cybersecurity AI governance - which owns security threat models, penetration testing, and SOC integration. This role is accountable for demonstrating ongoing compliance with all required governance standards, including cybersecurity governance, and holds the authority to require remediation or suspend production deployment when governance standards are not met.

Capability Alignment

This role owns or contributes to the following enterprise capabilities:

* AI platform governance (owner - operational governance gates, AI policy, regulatory compliance, and model lifecycle governance)

* AI enablement & change management (contributing - responsible AI adoption governance and trust frameworks)

* AI security governance (contributing - align with AI security governance on shared governance boundaries)

Key Responsibilities

AI Platform Governance Framework

* Establish and operate pre-deployment governance gates-bias and fairness testing, explainability validation, safety guardrail verification, and documentation completeness-and serve as the governance approval authority for AI production readiness.

* Enforce ongoing production governance including drift detection thresholds, retraining approval criteria, and periodic model reviews.

* Maintain and publish model card templates aligned to EU AI Act requirements, including tier classification worksheets and validation and pre-deployment checklists.

* Maintain authority to require remediation or suspend production deployment when governance standards, including cybersecurity governance, are not met.

* Operate the AI model inventory and registry within the enterprise governance platform, Informatica Cloud Data Governance and Catalog (CDGC), ensuring all production AI models are cataloged, classified, and traceable.

AI Onboarding & Intake

* Own the AI use case intake process, including use case templates, architectural pattern validation, and model onboarding workflows.

* Ensure every new AI initiative undergoes comprehensive evaluation across model selection, security and data risk review, data quality assessment, and governance compliance before proceeding to development.

AI Regulatory Compliance & Risk Management

* Own EU AI Act conformity assessment templates and geographic deployment scope tracking for all production AI systems.

* Align AI governance practices with NIST AI RMF, ISO/IEC 42001, and applicable cross-border AI deployment regulations.

* Maintain and operate the enterprise AI risk register, ensuring all identified AI risks are documented, assessed, mitigated, and auditable.

* Conduct vendor AI due diligence for third-party AI components and maintain the vendor AI due diligence checklist.

* Operate the embedded AI review process for AI capabilities within SaaS platforms, ensuring governance coverage extends to procured AI features.

Model & System Quality

* Oversee model validation, accuracy, robustness, and drift detection standards for all production AI models.

* Define and enforce quality and reliability standards for agentic AI behavior, including autonomous decision boundaries and exception handling.

* Govern…