AI governance SME

Requirements

• 8+ years in risk, compliance, audit or data governance, with 2+ years focused on AI/ML •Working knowledge of EU AI Act, GDPR, NIST AI RMF and ISO/IEC 42001 •Enough technical fluency to challenge model evaluation and monitoring claims credibly •Track record turning regulation into controls engineers will actually adopt •Experience with third-party/vendor AI risk assessment and contractual safeguards •Certification such as CIPP/E, CISA or ISO 42001 lead auditor is a plus

Responsibilities

• Own the AI governance framework: intake, risk tiering, approval gates and model inventory •Operationalise the EU AI Act, NIST AI RMF and ISO/IEC 42001 into practical engineering controls •Define policy for data provenance, PII handling, retention and third-party model use •Stand up evaluation, red-teaming and bias/fairness testing requirements per risk tier •Run the AI review board and maintain audit-ready documentation and model cards •Advise product and legal teams on acceptable-use, transparency and human-oversight design