Head of AI Governance
Listed on 2026-06-22
-
IT/Tech
Information Security, Data Security, Cybersecurity, AI Engineer (Applied/Software)
Position Overview
Novelis is one of the world leaders in aluminum recycling and rolling and a leading sustainable aluminum solutions provider. Driven by our purpose of shaping a sustainable world together, we work alongside our customers to provide innovative solutions to the aerospace, automotive, beverage packaging and specialty markets. Headquartered in Atlanta, Georgia, Novelis has approximately 13,000 employees in 32 operating facilities on 4 continents.
Responsibilities& Qualifications
Position Overview
Novelis is seeking a Head of AI Governance to own the operational governance gates for AI systems across the enterprise, ensuring AI solutions meet established quality, performance, and lifecycle standards prior to deployment and throughout production. This role is responsible for overseeing AI-specific operational risks—including model drift, hallucinations, bias management, explainability implementation, and autonomous or emergent system behaviors—and for working closely with AI delivery teams to ensure these risks are effectively managed.
Reporting directly to the VP of Data, Analytics & AI and based in Atlanta, GA, this role is organizationally independent from the AI delivery function to maintain governance objectivity, consistent with the governance independence principles outlined in the NIST AI RMF Playbook. This role carries a program-management and regulatory compliance orientation. Given Novelis’s multinational footprint and exposure to aerospace clients, the AI governance function must be built to navigate EU AI Act requirements, NIST AI RMF standards, ISO/IEC 42001 obligations, cross-border data protection regulations, TISAX certification requirements, and sector-specific regulatory risk.
This role reinforces the enterprise Data & AI Governance framework without duplicating data governance controls. The Head of AI Governance maintains clear separation from cybersecurity AI governance - which owns security threat models, penetration testing, and SOC integration. This role is accountable for demonstrating ongoing compliance with all required governance standards, including cybersecurity governance, and holds the authority to require remediation or suspend production deployment when governance standards are not met.
Capability Alignment
This role owns or contributes to the following enterprise capabilities:
- AI platform governance (owner — operational governance gates, AI policy, regulatory compliance, and model lifecycle governance)
- AI enablement & change management (contributing — responsible AI adoption governance and trust frameworks)
- AI security governance (contributing — align with AI security governance on shared governance boundaries)
Key Responsibilities
AI Platform Governance Framework
- Establish and operate pre-deployment governance gates—bias and fairness testing, explainability validation, safety guardrail verification, and documentation completeness—and serve as the governance approval authority for AI production readiness.
- Enforce ongoing production governance including drift detection thresholds, retraining approval criteria, and periodic model reviews.
- Maintain and publish model card templates aligned to EU AI Act requirements, including tier classification worksheets and validation and pre-deployment checklists.
- Maintain authority to require remediation or suspend production deployment when governance standards, including cybersecurity governance, are not met.
- Operate the AI model inventory and registry within the enterprise governance platform, Informatica Cloud Data Governance and Catalog (CDGC), ensuring all production AI models are cataloged, classified, and traceable.
AI Onboarding & Intake
- Own the AI use case intake process, including use case templates, architectural pattern validation, and model onboarding workflows.
- Ensure every new AI initiative undergoes comprehensive evaluation across model selection, security and data risk review, data quality assessment, and governance compliance before proceeding to development.
AI Regulatory Compliance & Risk Management
- Own EU AI Act conformity assessment templates and geographic deployment scope tracking for all production AI…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).