Technology & Cyber Governance - AI Governance

Technology And Cyber Governance Staff For Ai Governance

The Technology and Cyber Governance Staff for AI Governance is an individual contributor responsible for designing, implementing, and continuously improving governance frameworks and control environments, with a primary focus on Artificial Intelligence (AI) including Generative and Agentic AI technology risk management. This role will partner across Technology, Cybersecurity, Data and Analytics, and Risk to ensure AI capabilities are deployed responsibly, securely, and in alignment with regulatory expectations and enterprise risk appetite.

The role will require strong business acumen, technical fluency, and the ability to translate complex risks into clear, actionable governance practices for executive stakeholders.

Essential Job Functions

• Design and implement AI governance frameworks, including policies, standards, and control libraries aligned to regulatory and industry guidance (e.g., NIST AI RMF, NIST CSF, OWASP).
  
  - (15%)
• Define and operationalize controls across the AI lifecycle (data sourcing, model development, validation, deployment, monitoring, and retirement), emphasizing manual and data-driven approaches where possible.
  
  - (15%)
• Establish guardrails for responsible AI, including bias management, explainability, transparency, model risk management, and ethical use.
  
  - (15%)
• Identify, assess, and monitor AI-related risks, including model risk, data risk, privacy risk, and third-party exposure.
  
  - (15%)
• Partner with second-line risk teams to align AI controls with enterprise risk frameworks, risk appetite, and oversight expectations.
  
  - (10%)
• Partner with AI governance and security teams to ensure consistent alignment across technology and cyber control environments.
  
  - (10%)
• Develop, track, and report AI-related KRIs and KPIs to enable executive, risk committee, and board-level visibility and decision-making. Integrate AI governance into existing Technology and Cyber GRC processes, including issue management, risk acceptances, and control testing.
  
  - (10%)
• Enable governance tooling (e.g., GRC platforms, model registries, monitoring tools) to automate control execution, monitoring, and reporting.
  
  - (5%)
• Monitor evolving AI regulations and industry standards; translate requirements into actionable controls, support exams/audits, and advise cross-functional teams to drive consistent adoption across business units.
  
  - (5%)

Minimum Qualifications

• Bachelor's Degree in Information Technology, Cybersecurity, Data Science, Artificial Intelligence, Risk Management, or related field of study or equivalent, relevant work experience
• 8+ years of experience in Technology Risk, Cybersecurity, Data Governance, or related discipline.
• Demonstrated experience designing and implementing governance frameworks and controls.
• Experience working with enterprise GRC processes (risk assessments, control design, issue management).

Preferred Qualifications

• Master's Degree in Information Technology, Cybersecurity, Data Science, Artificial Intelligence, Risk Management, or related field of study or equivalent, relevant work experience
• Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium
• AWS Cloud Practitioner Certification
• ISACA, CRISC, AI Certifications
• Experience developing or governing AI/ML models, including model lifecycle management and model risk controls.
• Familiarity with frameworks such as OWSAP, NIST AI Risk Management Framework, NIST CSF 2.0, ISO 27001/42001, or similar.
• Experience in financial services or other highly regulated industries.

Skills

• Artificial Intelligence (AI)
• Artificial Intelligence Strategy
• IT Governance Risk and Compliance (GRC)
• NIST Cybersecurity Framework (CSF)
• Risk Analytics
• Risk Management
• Business Metrics
• Executive Communications
• Data Governance

Reports To:

Senior Manager and above Direct Reports: 0 Work Environment

• Normal office environment. (Remote or Hybrid), 3 to 4 days per month are required in office if within 60 miles of a posted Bread Financial location.

Travel

• Ability to travel up to 5% quarterly

Physical and Mental Requirements To perform this job successfully, an individual must be able to…