Sr. Director, AI & Technology Risk Governance

Department

Information Technology

Employees living within 30 miles of the TMG home office are expected to follow a hybrid or in‑office schedule. The initial training period may require additional in‑office days.

• AI Systems Governance Leadership (Primary Focus)
  • Own and operate the AI Systems Governance Program across the full lifecycle:
    Intake, risk assessment, approval, monitoring, and retirement.
  • Lead the AIS / Security Governance Team to execute AI governance activities defined in the AIS Program, including AI risk threshold analysis, AI system review and risk classification, and governance recommendations for approval and escalation.
  • Ensure governance is executed as a continuous control function with ongoing validation, monitoring, and improvement.
  • Partner with business and AI teams to ensure governance enables responsible AI adoption, not just compliance.
• Multi‑Member Governance Model
  • Establish and operationalize a shared AI governance model across multiple member insurance carriers.
  • Ensure consistent application of AI policies, standards, and controls, and risk classification and escalation frameworks.
  • Partner with member organizations to understand AI use cases and business objectives, align governance with member‑specific regulatory and risk requirements, support adoption of best practices, playbooks, and controls across members, and drive consistency in AI inventory, reporting, and monitoring.
• Risk Oversight & Decisioning
  • Provide executive oversight of AI risk assessments and governance decisions, review and approve low‑risk AI systems, and elevate mid/high‑risk systems to the CLO and AIS Committee.
  • Exercise judgment in risk classification ambiguity and escalation decisions.
  • Ensure appropriate governance for predictive models impacting underwriting, claims, and pricing, customer‑facing AI use cases, and AI systems leveraging sensitive or regulated data.
• Monitoring, Controls & Assurance
  • Oversee ongoing monitoring and validation of AI Systems, including model performance, drift and bias detection.
  • Ensure AI Systems continue to meet regulatory expectations, ethical and fairness standards, and oversee effectiveness of cyber security controls, IT general controls, and data privacy safeguards.
  • Drive readiness for internal audit and regulatory exams, external certifications (SOC
    2).
• Vendor & Third‑Party AI Governance
  • Oversee vendor‑wide AI governance across the enterprise and member organizations, ensuring execution of vendor AI detection, fact sheet review, and updates.
  • Partner with Vendor Management and member teams to ensure vendors meet contractual, regulatory, and AI governance requirements and support member‑specific vendor risk needs.
• Reporting & Incident Management
  • Lead AIS Committee engagement and Board‑level reporting, provide bi‑annual updates on AI risk posture and cyber/technology risk posture, and ensure consistent and transparent reporting across member organizations.
  • Oversee governance of AI‑related incidents and anomalies, including cross‑functional coordination, escalation, and remediation.
• Broader Technology Risk Governance
  • Establish unified governance across cyber security, data privacy, and IT general controls and risk register, ensuring alignment between AI governance and broader technology risk frameworks.
• Cross‑Functional Coordination
  • Collaborate closely with technology and business teams across the organization, ensuring effective coordination with the Architecture Review Board (ARB) where architectural alignment is required.
• Team Leadership
  • Build and lead a high‑performing governance team, set operating cadence, priorities, and performance expectations, and foster a service‑oriented mindset focused on enabling member organizations.

• 12+ years in technology risk, AI governance, cyber risk, or enterprise risk.
• Experience operating in regulated environments (insurance or financial services preferred) and multi‑entity/shared services/multi‑carrier environments.
• Deep understanding of AI Systems governance and model risk.
• Strong familiarity with NAIC AI Model Bulletin, NYDFS Cybersecurity Regulation, CCPA, NIST CSF and NIST AI RMF, SOC 2.
• Experience with…