AI GRC Architect

Own the enterprise AI Governance architecture roadmap and technical implementation for One Trust and associated GRC platforms.
Define and lead enterprise architecture for AI Governance and Cyber GRC workflows.
Own end-to-end AI governance lifecycle design: intake, classification, risk tiering, review/approval gates, exception handling, monitoring, and periodic reassessment.
Translate policy and regulatory obligations into technical control patterns and reusable architecture blueprints deployable across UAT and production.
Design and govern resilient API integrations across One Trust, Archer, and broader enterprise systems.
Establish role, group, and organizational segmentation architecture to enforce least-privilege access and scalable governance operations.
Lead architecture decisions for automation, error handling, observability, incident response, and production support readiness.
Chair cross-functional architecture reviews and influence risk, compliance, and engineering decision forums on control design and prioritization.
Mentor engineers and analysts through architecture standards, implementation playbooks, and design quality reviews.

• 8+ years of combined experience across governance, risk, compliance, cybersecurity engineering, or adjacent technical disciplines in complex enterprise environments.
• 5+ years in enterprise architecture or senior engineering roles delivering security, GRC, compliance, or governance platforms at scale.
• Demonstrated experience designing enterprise AI governance or model risk lifecycle controls from policy through technical implementation.
• Deep integration engineering expertise: REST APIs, OAuth, reliability patterns, dependency governance, and production-grade operational resilience.
• Strong software and scripting capability (for example Python, JavaScript, and API-driven automation) with flexibility to work across unfamiliar stacks when needed.
• Experience translating business and regulatory requirements into control taxonomies, implementation plans, and governed technical workflows.
• Strong executive and technical communication skills, including architecture decision records, stakeholder alignment, and risk tradeoff articulation.
• Proven experience leveraging GRC platforms to operationalize compliance requirements across frameworks including SOC 2, HITRUST, NIST AI RMF, and PCI DSS through automated assessments, continuous control monitoring, evidence management, and compliance reporting.

Demonstrates expertise in enterprise AI governance architecture, including the design and implementation of governance frameworks and technical control patterns. Proficient in integrating GRC platforms and translating regulatory requirements into operational workflows.

• Enterprise AI Governance Architecture
• Integration Engineering Expertise
• REST APIs
• GRC Platforms
• Technical Communication Skills

• Governance
• Risk Management
• Compliance
• Cybersecurity Engineering
• AI Governance Lifecycle Design
• Control Taxonomies
• Python
• Java Script
• API-Driven Automation
• Operational Resilience

• Executive Communication
• Stakeholder Alignment
• Mentoring

• SOC 2
• HITRUST
• NIST AI RMF
• PCI DSS
• Automated Assessments

• One Trust
• Archer
• UAT
• Production Systems