Senior Compliance Analyst, Artificial Intelligence

The Senior Compliance Analyst, Artificial Intelligence will support the Compliance function in managing AI and data related matters across Ontario Teachers' Pension Plan, contributing to key functions of the Compliance Operating Model: i) Advisory, ii) Policies and Procedures, iii) Education and Training, iv) Monitoring and Surveillance, and v) Compliance Risk Management.

The role manages AI risk assessment intake and triage, case administration, control-evidence upkeep, and activities that support data risk oversight — including coordination on data loss prevention (DLP) alert triage and exception handling. The role broadly supports the responsible enablement of AI in line with OTPP strategic priorities.

You’ll work closely with Legal, Compliance, Applied Intelligence, Cybersecurity, and Data Governance contacts on routine, operational matters, referring matters requiring judgment, negotiation or policy interpretation to the Director.

• Manage day-to-day intake and triage of AI use cases and AIRA requests, applying established risk-tiering criteria and escalating complex or higher-risk items to the Director, AI Compliance.
• Administer AIRA case management end-to-end for low- and (with experience) medium-complexity assessments, including drafting findings, tracking status and following up with stakeholders to keep reviews moving without creating bottlenecks.
• Maintain the AI use case inventory and related records so that they remain current, complete and audit-ready, and supports control-evidence collection ahead of internal audit and regulatory investigations.
• Monitor, track and follow up on outstanding actions, remediation items and overdue tasks across the AI Compliance program.
• Manage risk based DLP alert triage and exception handling under established thresholds, strengthening data protection, and escalating data-loss or AI risk incidents immediately in accordance with incident protocols.
• Prepare recurring reporting and metrics (e.g., intake and triage, inventory and AIRA currency, control-evidence completeness, overdue actions) for the Director, AI Compliance and supports input into AI governance and NIST AI RMF reporting.
• Support the development and delivery of training and awareness materials related to AI compliance, risk management and responsible AI practices.
• Contribute to the AI Compliance program’s operating workflows, templates and documentation (procedures, triage criteria, escalation paths) to build repeatable process and reduce key-person dependency.
• Support assigned deliverables under the NIST AI RMF roadmap and other regulatory or governance work streams as directed by the Director, AI Compliance.
• Build working relationships with partner teams, including Enterprise Security (on NIST AI RMF, AI Policy compliance and DLP tooling/alerting) and Business Technology (on the approved AI tools list and enterprise tooling rollout), to support coordinated execution without duplicating their roles.
• Stay current on AI Compliance operating practices, tools and emerging risk and governance themes relevant to the day-to-day execution of the program.
• Know when to consult versus act independently: elevate promptly when a matter is ambiguous, higher-risk, precedent-setting, or falls outside documented criteria.
• Prepare recommendations and analysis on complex or higher-risk matters for the Director's review.
• As documented precedent and program maturity expand, take on a growing share of medium-complexity work independently, with escalation thresholds adjusted accordingly.

• 3–5 years of relevant experience in compliance, risk management, audit, investigations or technology operations.
• Bachelor's degree in a related field (e.g., business, data/computer science, risk management) preferred; equivalent experience considered.
• Strong analytical and case-management skills, with the ability to triage, track and follow up on a high volume of items against defined criteria and timelines.
• Strong plain-language writing skills, able to summarize findings and status clearly for both technical and non-technical audiences.
• Sound judgment on when to act independently versus escalating; comfortable operating within documented workflows, triage criteria and escalation paths.
• Advanced familiarity with AI and data governance concepts (e.g., AI risk assessment processes, data loss prevention, control evidence) gained through prior compliance, risk, audit or…