Enterprise Risk Officer

At MFS, you will find a culture that supports you in doing what you do best. Our employees work together to reach better outcomes, favoring the strongest idea over the strongest individual. We put people first and demonstrate care and compassion for our community and each other. Because what we do matters – to us as valued professionals and to the millions of people and institutions who rely on us to help them build more secure and prosperous futures.

The Enterprise Risk Officer leads the development, advancement, and continuous improvement of MFS’ enterprise risk framework for Technology and Artificial Intelligence (AI). Serves as the Enterprise Risk subject matter expert for Tech/AI risk assessment and Tech/AI risk mitigation across MFS, ensuring the program effectively meets the needs of the firm and adapts to evolving regulatory expectations. The role is responsible for helping establish, maintain, and operationalize risk management and governance practices for AI-enabled solutions, machine learning, generative AI, intelligent automation, advanced analytics, and related emerging technologies.

Working closely with the MFS AI Governance Group and second-and first-line stakeholders, the incumbent provides effective challenge and practical risk guidance to support responsible AI adoption and resilient technology operations consistent with MFS’ risk appetite, regulatory obligations, and strategic objectives.

• Tech & AI Risk Program Leadership and Implementation:
  Lead the design and operational execution of MFS’ Technology and AI Risk program, ensuring it meets business objectives, aligns to global standards, and adapts to emerging threats, business change, and regulatory updates.
• AI Governance Program Implementation and Operation:
  Partner with, and provide second-line support to, the MFS AI Governance Group to operationalize the firm’s AI governance framework. Support intake, review, approval, and ongoing monitoring processes for AI tools and use cases (generative AI, algorithmic AI, and agentic solutions).
• AI Risk Assessment and Mitigation:
  Conduct and facilitate risk assessments for AI, generative AI, machine learning, intelligent automation, and advanced analytics. Assess risks related to transparency, explainability, reliability, bias, fairness, privacy, data quality, security, resilience, human oversight, and third-party dependency. Develop practical risk mitigation recommendations, monitor action plans through completion, and escalate significant risks, issues, and control gaps through appropriate governance channels.
• Technology and Emerging Technology Risk Oversight:
  Assess technology risks arising from the integration of new tools with legacy systems, cloud and platform adoption, and the modernization of core infrastructure, coordinating with GIT, Information Security, and Data Governance.
• Controls, Monitoring, and Reporting:
  Evaluate the design and effectiveness of Tech and AI-related governance controls, key risk indicators, monitoring routines, and documentation practices; support the development of risk metrics, dashboards, and reporting for senior management and governance committees.
• Third-Party and Vendor Technology/AI Risk:
  Partner with third-party risk and business owners to assess concentration, operational, cyber, contractual, and resilience risks associated with technology and AI vendors, including fourth-party dependencies.
• Change and Transformation Risk Assessments:
  Lead or support targeted risk assessments for significant technology, data-driven, AI-enabled, and transformation initiatives, evaluating impacts on governance, controls, data, process ownership, and operational resilience.
• Risk Culture, Training, and Stakeholder Engagement:
  Facilitate workshops and training to advance the organization’s understanding of responsible AI and technology risk, and build trusted relationships across Risk, Technology, Compliance, Legal, Information Security, Data Governance, and the business.

• Bachelor’s degree or equivalent work experience.
• 8-12+ years of relevant work experience in risk (enterprise, operational, technology, or IT risk),…