AI Governance, Security & Compliance Manager

POSITION SUMMARY

The AI Governance, Security & Compliance Manager is responsible for leading Hagadone Corporation's enterprise AI governance, cybersecurity governance, risk management, and compliance programs. This strategic leadership role drives the responsible adoption of artificial intelligence across the organization by establishing governance frameworks, policies, risk controls, and best practices that enable innovation while protecting business operations, data, and regulatory compliance.

Partnering with executive leadership, IT, Human Resources, Finance, Legal, and third-party vendors, the AI Governance, Security & Compliance Manager develops and maintains security and compliance programs, including PCI DSS compliance, risk assessments, policy management, audit coordination, and regulatory readiness. The role serves as a key advisor on emerging AI technologies and information security risks, translating complex technical and regulatory requirements into practical, sustainable, and auditable business processes.

This is a governance and leadership position rather than a hands‑on systems administration or security operations role. The position reports directly to the Chief Information Officer (CIO) of Hagadone Corporation and is based on‑site at the company's headquarters in Coeur d'Alene, Idaho. Regular in‑person attendance is required.

ESSENTIAL DUTIES AND RESPONSIBILITIES

AI Strategy, Leadership and Governance

• Champion and lead the organization's AI adoption strategy, partnering with senior leadership to identify, evaluate, and prioritize AI tools and initiatives that deliver business value.
• Build and own the company's AI governance framework, including policies, standards, risk assessment processes, and decision‑making workflows for AI tool approval and ongoing oversight.
• Conduct AI risk assessments for proposed and in‑use AI technologies, evaluating data privacy, confidentiality, security, accuracy, vendor risk, regulatory exposure, and ethical considerations.
• Establish and maintain an AI tool registry and approval process, ensuring all AI systems used across the organization are vetted, documented, and monitored.
• Drive AI literacy and readiness across the organization — develop training programs, change management plans, and communications that help employees understand and responsibly use AI tools.
• Define and communicate guardrails, acceptable use standards, and data classification guidance specific to AI usage (e.g., what data may be entered into generative AI tools, when human review is required, how AI outputs should be validated).
• Stay current on the evolving AI regulatory and risk landscape, including emerging frameworks and proactively surface relevant considerations to leadership.
• Serve as the organization's internal AI consultant advising business units on responsible AI integration and helping teams move from experimentation to scalable, governed adoption.
• Partner with vendors, technology partners, and external advisors to evaluate AI platform capabilities, contractual safeguards, and shared responsibility obligations.

GOVERNANCE, RISK & COMPLIANCE SECURITY COMPLIANCE PROGRAM

• Lead the development, implementation, and ongoing maintenance of the organization's information security governance, risk, and compliance program.
• Coordinate and manage the company's PCI DSS process, including evidence collection, control validation, remediation tracking, and year‑round readiness activities.
• Support and coordinate cyber insurance security requirements, questionnaires, renewals, and control attestations.
• Assist with financial, cybersecurity, regulatory, and third‑party audit requests, including gathering documentation, coordinating responses, and tracking follow‑up items to closure.
• Maintain…