Director, Data & AI Risk Management
Posted 15hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Data and AI risk director building practical governance for Salas O’Brien, an employee-owned engineering and professional services firm. Leading AI oversight, controls, inventories, audits, and responsible adoption.
Responsibilities:
- Develop, maintain, and improve data and AI policies, standards, procedures, and implementation guidance
- Lead the Data and AI Risk Management Committee by setting agendas, guiding policy and risk decisions, documenting outcomes, and escalating key matters to senior leadership
- Define and apply risk expectations for frontier models, data privacy, and security
- Manage AI use-case intake by assessing requests, approving or conditioning use, declining requests when needed, and explaining decisions
- Maintain a complete inventory of models, agents, and AI-enabled tools, including vendor- and acquisition-sourced tools
- Ensure controls have clear owners, defined evidence, and review cadences, and confirm evidence is available for client, audit, or regulatory review
- Translate regulatory, contractual, and client requirements into practical business controls
- Review third-party AI tools and vendors, maintain the approved tool list, and keep it visible to employees
- Manage exceptions with clear criteria, timelines, documented decisions, and follow-through to resolution
- Partner with communications, training, and other stakeholders to create plain-language guidance, training, and employee resources
- Partner with business and functional leaders to embed governance into day-to-day operations
- Report to the Senior Vice President, Data and AI and lead the cross-functional Data and AI Risk Management Committee
- Support audit readiness, inventory completeness, intake service levels, and adoption of the governance program
- Travel occasionally for leadership meetings, governance sessions, audits, stakeholder engagement, or business planning
Requirements:
- Twelve or more years in risk management, governance, compliance, audit, or a closely related discipline, with substantial focus on data, analytics, or artificial intelligence
- Demonstrated experience developing and implementing policies, standards, and procedures that meet legal, audit, regulatory, or client expectations
- Working command of model risk management practice, including inventory, validation, monitoring, and documentation expectations
- Experience mapping regulatory and contractual obligations to operating controls under frameworks such as NIST, ISO, or an equivalent, and maintaining traceability
- Experience running a governance committee, including agenda control, quorum management, decision records, and escalation
- Experience with evidence and audit readiness, including sampling, control testing, and remediation tracking
- Familiarity with AI-specific risk domains, including data leakage, prompt injection, model drift, intellectual property exposure, and third-party model terms
- Bachelor's degree in relevant discipline, or equivalent experience
- Strong written communication skills, with the ability to write both a standard and its plain-language summary
- Preference may be given to candidates with experience in regulated or controlled-data environments, including federal contracting, Controlled Unclassified Information, Cybersecurity Maturity Model Certification, or defense and critical infrastructure work
- Experience in financial services, healthcare, or another sector with mature model governance practices is a meaningful advantage
- Professional certification such as CIPP, CISA, CRISC, CISM, or an equivalent is a nice to have
- Legal or regulatory training, including experience working directly with outside counsel on AI and data terms
- Experience with data governance tooling and catalog-based policy enforcement, including Unity Catalog or a comparable capability
- Experience supporting governance integration during acquisitions
- Required Education: Bachelors or better in Computer Engineering or related field
Benefits:
- Performance-based bonus
- Medical, dental, and vision insurance
- 401(k) with company match
- Paid time off and company holidays
- Wellness programs
- Employee assistance resources
- Professional development support
- Employee ownership/shared ownership of success









