AI Risk Program Manager
Listed on 2026-06-12
-
IT/Tech
Data Security, Cybersecurity, Information Security, IT Business Analyst
Job Description
We are seeking an experienced AI technology risk manager to support the build and execution of our Corporate Functions Risk (CFR) Artificial Intelligence (AI) Risk Program. This role will serve as a key contributor in establishing governance across the asset lifecycle to enable safe, compliant, and scalable adoption of AI across the enterprise.
The individual will act as a central point of coordination for AI use case onboarding and production governance, partnering closely with Corporate Functions, Technology, Risk Management and Compliance, Law Division, and Data teams to ensure alignment with policy requirements, regulatory expectations, and enterprise risk frameworks.
The role partners closely with Second Line of Defense (2
LOD) teams (Enterprise Risk Management, Model Risk Management, Compliance, Law Division, and Technology Risk Oversight) to ensure emerging AI technology risks are properly identified, assessed, documented, monitored, escalated, and remediated. While 2
LOD provides independent oversight and challenge, this role retains business line accountability for execution, evidence, and remediation.
- Serve as the central intake point (“front door”) for AI use cases, pilots, proofs of concept (POCs), and material changes across Corporate Functions
- Provide consultative guidance to stakeholders on AI policy requirements, risk considerations, and governance expectations
- Perform intake quality control (QC) to ensure completeness, proper classification, and readiness for downstream risk and governance processes
- Coordinate routing of AI use cases to appropriate partners (CFR Technology Risk, Law Division, ISS, RM&C, etc.)
- Support the end‑to‑end management of the AI Use Case Registry for CFR, ensuring all AI-use cases and technologies are accurately documented and maintained throughout their lifecycle
- Validate completeness and accuracy of key registry attributes, including:
- AI category, risk tier, and autonomy level
- Data classification and system dependencies
- Use case purpose, ownership, and lifecycle status
- Coordinate updates to the registry for material changes, enhancements, and decommissioning events
- Contribute to development and refinement of registry standards, data requirements, and governance workflows
- Establish and support risk‑based performance monitoring for AI use cases outside Model Risk Management (MRM) scope, including definition of metrics, thresholds, and escalation triggers to detect performance degradation, unintended outcomes, or emerging risk post‑deployment
- Support execution of AI risk tiering processes, including identification of triggers requiring reassessment (e.g., scope expansion, connector additions, customer impact)
- Translate AI Technology Policy requirements into practical intake standards, guidance, and job aids for business stakeholders
- Partner with cross‑functional risk teams to ensure alignment with Model Risk Management, Third Party Risk Management, Enterprise Data Governance, and other enterprise policies and programs to drive simplicity and speed to market
- Assist in identification and escalation of unregistered or unauthorized use case
- Bachelor’s degree, or equivalent work experience
- Typically 10+ years of applicable experience in risk management, compliance, audit, technology risk, or operational risk
Skills and Qualifications
- Experience with AI/ML, emerging technologies, or advanced analytics governance
- Familiarity with AI regulatory frameworks and guidance (e.g., NIST AI RMF, SR 11‑7, EU AI Act concepts)
- Experience managing or supporting centralized registries, inventories, or governance tools (e.g., Service Now, SharePoint, GRC platforms)
- Experience designing dashboards and developing self‑service reporting using Microsoft Power Platform
- Experience building, implementing, or leveraging artificial intelligence solutions to optimize business processes, improve efficiency, or enhance decision‑making
- Demonstrated experience operating in a First Line of Defense risk role with accountability for execution and outcomes
- Strong understanding of…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).