AI Risk and Governance Manager

Required Skills & Experience

1. Must Haves

Risk / Audit Background Hands-on experience performing risk assessments, audits, or Second Line of Defense assessments Understands how to identify, assess, challenge, and communicate risk Has actually performed assessment work, not just supported a governance program Understands the difference between oversight/challenge and being the person responsible for remediating the issue AI / Technical Understanding Practical understanding of AI technology and AI risk Can discuss Responsible AI / Safe AI controls Understands guardrails and AI control mechanisms Can explain where AI controls may fail or miss risks Enough technical depth to speak credibly with AI/model-development teams Communication

Must be comfortable communicating with both:

Business executives / risk leadership Technical teams / AI engineers They need to translate technical AI risk into understandable business terms.

Nice to Have Skills & Experience

2. Plusses / Ideal Background These aren't necessarily knockout requirements, but they should move someone toward the top of the hotbook. Combination of audit + AI/model-development experience Banking or financial-services risk experience Prior Second Line of Defense experience Responsible AI governance experience Experience assessing Generative AI Understanding of autonomous/agentic AI controls Experience with AI guardrails Knowledge of tools such as Model Armor Experience building or reviewing AI/model controls Technical experience developing models or AI applications Experience creating or executing an AI risk coverage plan Experience challenging First Line teams versus operating solely as First Line engineering Ability to work independently as a true IC Ideal Persona

Risk/audit professional who became technically knowledgeable in AI, rather than an AI engineer who has never performed a formal risk assessment. That distinction is important because the feedback was that AI knowledge can be taught more easily than strong risk-assessment skills.

Job Description

3. Day-to-Day

The person will:

Help build and execute an AI risk coverage plan Identify the AI technologies, business areas, and use cases that require assessment Perform Second Line risk assessments against those areas Review existing AI controls and guardrails Plug into deployed AI/security/governance tools Partner with business and technology teams to understand how AI is being used Identify control gaps and areas of elevated risk Provide targeted challenge back to First Line/business teams Assess whether risks remain within the bank's risk appetite Communicate findings and recommended changes to both executives and technical stakeholders Important distinction They are not primarily fixing the technical problems themselves.

Their job is closer to:

Understand → Assess → Challenge → Communicate → Monitor

rather than:

Build → Engineer → Remediate