Lead, Technology Risk & Compliance Business Partners - AI

What you'll do

• Manage the cyber risk and compliance relationship for the AI and machine learning estate, including maintaining its risk register and treatment plans.
• Assess AI-related threats, risks and controls, and advise on how changing capabilities, threats and regulations affect risk posture.
• Embed security requirements in initiatives, facilitate risk assessments, and translate cyber policies and standards into practical guidance.

What they ask for

• Degree in a relevant discipline, or related experience.
• Experience in cyber risk, technology risk or information security governance, with hands-on experience in a relevant cybersecurity domain.
• Working knowledge of risk assessment and risk register management.
• Understanding of AI/ML risk and compliance, including generative and agentic AI attack and failure modes and mitigating controls.

Nice to have

• Experience as a business information security officer or embedded security partner; working knowledge of NIST CSF, ISO 27001, ISO 22301, or GRC platforms such as ServiceNow.
• Experience in a regulated industry, AI security frameworks or AI testing; relevant certification such as CISM, CRISC, CISA or CISSP.

Pay

$75,750 to $126,250 USD annual base salary

Tools

ServiceNow GRC, Power BI, NIST CSF, ISO 27001, ISO 22301, NIST AI Risk Management Framework, OWASP Top 10 for LLM Applications, ISO/IEC 42001

AI focus

Supports the governance and security of generative and agentic AI, including assessing AI risks, attacks and failure modes, applying preventive and detective controls, and using approved AI tools responsibly.