AI Governance Manager

As the state’s IT leader, DoIT manages information technology and telecommunications services and provides critical support to state agencies, the Executive Office of the Governor, coordinating offices, and independent Executive Branch agencies. The agency provides cybersecurity, digital, data governance, AI enablement, infrastructure, and platform services to its partner agencies, ensuring the State of Maryland is more secure, productive, and accessible.

** This is a management service position that serves at the pleasure of the appointing authority**

The AI Governance Manager is responsible for the day-to-day execution of DoIT's AI governance framework. The Manager will develop and maintain the Statewide AI Inventory, coordinate risk assessments, and ensure that every AI system--whether built internally or purchased from a vendor--meets DoIT's standards for transparency, data privacy, and accountability. The Manager will also support the AI intake and approval process as well as DoIT's AI Governance Committee.

• AI Inventory Management
  -Develop, maintain and manage the Statewide AI Inventory. This will require determining the requisite data points to include in the inventory, facilitating risk category assignment, and developing mechanisms to update and aggregate the inventory.
• AI Intake Requests - Support the review of AI use case submissions, verify for completeness and provide risk tier classification guidance to owner.
• Governance Cards - Support the creation of and updates to AI governance cards for high-impact use cases.
• Risk Assessment - Coordination Facilitate AI Impact Assessments for DoIT AI use cases and provide statewide guidance on AI Impact Assessments.
• AI Governance Committee - Prepare materials for the AI Governance Committee. Compile agenda, pre-reads, status updates, new use case summaries, meeting minutes, and follow-ups.
• Other Duties As Assigned

• Education:
  
  A bachelor’s degree from an accredited college or university in Information Technology, Computer Science, Data Science, Public Policy, Law, or a related field.
• Experience:
  
  Four (4) years’ experience in IT governance, data privacy, risk management, and/or compliance. This experience also needs to include the following:
• Familiarity with the lifecycle of Machine Learning (ML) or Artificial Intelligence (AI) Systems.
• Ability to leverage automation tools (like GRC platforms or Python scripts) to manage AI Inventory.
• Experience conducting risk assessments or audits (e.g., NIST frameworks, SOC2, or HIPAA).
• Note:
  
  A master’s degree in the fields above may substitute for one (1) year of the required experience.

• Preference will be given to those who also have the following:
• Familiarity with the NIST AI Risk Management Framework (AI RMF) or ISO/IEC 42001.
• Possession of a CISA (Certified Information Systems Auditor), CIPP/US (Certified Information Privacy Professional), or specialized AI ethics/governance certification.
• Strong technical writing skills for creating “Governance Cards” and meeting transcripts for executive leadership