AI Risk Officer Manager

Responsibilities

• Acts as a trusted advisor to assigned business/group.
• Guides/assists in the identification and classification of issues; recommends action plans.
• Influences and negotiates to achieve business objectives.
• Recommends and implements solutions based on analysis of issues and implications for the business.
• Assists in the development of strategic plans.
• Identifies emerging issues and trends to inform decision‑making.
• Researches existing or emerging requirements and related best practices to develop recommendations for changes/enhancements.
• Independently assesses the information and technology risk profile (e.g., exposures, material initiatives, system issues or weaknesses in the control structure) for the assigned portfolio.
• Assists with the interpretation of new or changing regulations and assesses impacts to governance frameworks.
• Helps determine business priorities and the best sequence for execution of the business/group strategy.
• Conducts independent analysis and assessment to resolve strategic issues.
• Leads the development and maintenance of the governance system and framework.
• Ensures alignment between stakeholders.
• Represents the risk program/gov­ernance structure during internal/external regulatory audits and/or examinations.
• Breaks down strategic problems and analyzes data and information to provide insights and recommendations.
• Coordinates the management of databases; ensures alignment and integration of data in adherence with data governance standards.
• Builds change‑management plans of varying scope and type; leads or participates in change‑management activities including readiness assessments, planning, stakeholder management, execution, evaluation and sustainment of initiatives.
• Leads or participates in defining the communication plan designed to positively influence or change behaviour; develops tailored messaging and identifies appropriate distribution channels.
• Assesses education and training needs to develop and deliver training.
• Leads and integrates the monitoring, measurement, and reporting on the status of the information and technology risk governance program to internal and external stakeholders.
• Leads the management of governance meetings and maintenance of governing body mandates, oversight, and approval guidelines.
• May provide specialized support for other internal and external regulatory requirements.
• Provides input into the planning and implementation of ongoing operational programs in support of the information and technology risk framework.
• Leads or participates in the design, implementation and management of core business/group processes.
• Administers and maintains technology and information security and management risk program activities adhering to applicable policies, procedures, and established processes.
• Reviews new business initiatives and monitors existing initiatives to identify potential risk situations/impacts; makes recommendations or escalates as per guidelines.
• Provides advice and guidance to assigned business/group on implementation of the risk framework, including effective challenge.
• Coordinates and participates in the execution of oversight/governance activities including reporting, assessment of education & training needs, development/delivery of training, and development and execution of regulatory administration processes & procedures.
• Consults with stakeholders to improve consistency and transparency of risk measurement, metrics, and reporting.
• Supports the development and maintenance of the governance system and framework including supporting policy/standard/operating procedures lifecycle management, education and training assessments.
• Builds effective relationships with internal/external stakeholders to provide second‑line of defense information and technology risk management support.
• Manages databases and provides support for analysis, forecasting and/or data visualization, ensuring adherence with data governance standards.
• Maintains tools and templates for information and technology risk programs and standards (e.g., Risk Control Self‑Assessment (RCSA), Sarbanes‑Oxley (SOX), business continuity planning standards and policies for internal and third‑party…