AI GRC Program Manager

Nashville, Tennessee

The AI Governance, Risk & Compliance Program Manager leads the development and execution of Pillsbury’s AI governance program to support the responsible use of artificial intelligence across the Firm. The role focuses on AI compliance, risk management, policy development, internal governance, vendor oversight, and strategic program coordination to help ensure the Firm’s use of AI aligns with legal, regulatory, client, and business expectations.

• AI Governance Program Leadership
  Lead day‑to‑day execution and ongoing maturity of the AI governance, risk, and compliance program. Help define and operationalize the governance framework for third‑party and internal AI tools, establish clear intake, review, approval, and oversight processes, and align priorities with firm strategy.
• Policy Development & Interpretation
  Draft, maintain, and interpret AI‑related policies, standards, procedures, and governance guidance. Translate evolving legal, regulatory, and client expectations into practical internal requirements and operational controls, and provide guidance to business and technology stakeholders.
• Vendor AI Governance
  Establish and maintain the AI governance framework for third‑party vendors, integrate AI‑specific requirements into the vendor review process, and provide consultation on higher‑risk reviews. Define governance conditions for approved AI‑enabled vendors and ensure ongoing compliance expectations.
• Internal AI Governance
  Lead governance activities for internal AI systems and workflows. Define requirements around acceptable use, human oversight, output validation, escalation, transparency, and monitoring, and assess internal use cases for alignment with policy and regulatory requirements.
• Regulatory Compliance & Strategic Guidance
  Monitor emerging AI laws and regulations across key jurisdictions, advise stakeholders on implications, and identify needs for policy or process updates.
• Client‑Facing Governance Support
  Lead or support responses to client‑facing AI questionnaires, outside counsel guidelines, and diligence requests, coordinating with internal stakeholders to gather and validate required information.
• Audit Readiness, Controls & Assurance
  Design and maintain an auditable AI governance control environment, develop documentation and evidence for audits and regulatory inquiries, and support control mapping, gap assessments, and remediation tracking.
• Training, Awareness & Cross‑Functional Coordination
  Develop and deliver training and awareness materials on responsible AI use, facilitate governance meetings, and track and report key AI governance activities and milestones.

• Bachelor’s degree in Information Systems, Data Science, or related field (preferred).
• 7+ years of experience in governance, risk, compliance, privacy, information security, technology risk, regulatory compliance, or related discipline.
• Experience leading or managing cross‑functional governance or compliance programs.
• Familiarity with AI governance concepts and risks, including third‑party vendors and internal AI use cases.
• Familiarity with AI‑related regulatory developments in the U.S., U.K., and EU.
• Experience drafting, interpreting, and implementing policies, standards, procedures, or governance frameworks.
• Experience supporting audits, assessments, control reviews, or compliance readiness activities.
• Experience working cross‑functionally with Legal, IT, Security, Privacy, and business stakeholders.
• Strong understanding of confidentiality, data protection, and risk management principles.
• Ability to translate complex legal, regulatory, or technical issues into clear, business‑oriented guidance.
• Strong organizational skills, sound judgment, and attention to detail.

• Experience supporting AI governance, privacy, compliance, or technology risk efforts in a law firm or professional services environment.
• Experience with client‑facing questionnaires, outside counsel guidelines, or similar diligence processes.
• Experience reviewing vendor security documentation, privacy materials, contracts, and product data flows.
• Knowledge of governance and control…