Artificial Intelligence Governance and Risk Manager

Jobtailor; Deutschland; Hybrid; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Ferguson is seeking an experienced AI governance professional to lead day‑to‑day risk reviews across its AI portfolio. You will evaluate AI use cases, vendors, and tools against Ferguson's risk framework and run the AI Impact Assessment from intake through disposition.

You will maintain the AIIA repository and AI registry, own routing logic for required reviews, complete AI‑specific assessments before proceeding to Sourcing, InfoSec, and Legal, and track governance health metrics for senior

Qualifikationen

• Experience in AI governance, risk management, or compliance operations, in a matrixed enterprise environment.
• Working knowledge of legal and regulatory considerations related to AI, data privacy, vendor risk, and responsible technology governance.
• Data privacy experience, including data classification and privacy impact assessment methodology.
• Working knowledge of GRC processes and third-party/vendor risk review.
• Experience with AI discovery, monitoring, or governance tooling, including hands-on administration.
• Ability to operate independently against a governance framework that is still maturing.
• Autonomous decision making to assess when and what level of governance assessment is needed.
• Strong cross-functional coordination skills.
• Privacy certification (e.g., CIPP/E, CIPM) alongside AI governance training or audit credential (preferred).
• Familiarity with AI-specific risk considerations, including model risk, agentic system risk, and bias/explainability (preferred).
• Experience standing up or operating governance committee structures (preferred).

Aufgaben

• Own day-to-day execution of AI governance and risk review across Ferguson's AI portfolio.
• Evaluate AI use cases, vendors, and tools against Ferguson's risk framework.
• Run the AI Impact Assessment process from intake through disposition.
• Maintain the AIIA repository and AI registry as governance records.
• Own routing logic for required reviews based on data classification, AI Solution Tier, vendor/tool status, and agentic status.
• Complete AI-specific assessments before requests proceed to Sourcing, InfoSec, and Legal.
• Conduct high-level data privacy impact screens and assess fairness, bias, and explainability.
• Define escalation criteria for full PIA, Legal review, or AI Council-level escalation.
• Identify materially changed approved use cases requiring re-review.
• Own vendor and tool AI risk reviews and coordinate vendor risk disposition through Ironclad.
• Develop an agentic AI review approach with AI Technology & Innovation.
• Build visibility into unapproved AI usage and administer AI governance/discovery tooling.
• Support teams using unapproved tools in migrating to approved alternatives.
• Track and report governance health metrics to the Senior Manager.
• Maintain awareness of the AI regulatory landscape and support a regulatory register.
• Draft and refine AI governance policies, standards, and guidelines with the Senior Manager.

Kenntnisse

AI governance

Risk management

Compliance operations

Data privacy

GRC processes

AI discovery tooling

Cross-functional coordination

Autonomous decision making

Ausbildung

CIPP/E

CIPM

Tools

Ironclad

AI governance tooling

Jobbeschreibung

• Own day-to-day execution of AI governance and risk review across Ferguson's AI portfolio


• Evaluate AI use cases, vendors, and tools against Ferguson's risk framework


• Run the AI Impact Assessment process from intake through disposition


• Maintain the AIIA repository and AI registry as governance records


• Own routing logic for required reviews based on data classification, AI Solution Tier, vendor/tool status, and agentic status


• Complete AI-specific assessments before requests proceed to Sourcing, InfoSec, and Legal


• Conduct high-level data privacy impact screens and assess fairness, bias, and explainability


• Define escalation criteria for full PIA, Legal review, or AI Council-level escalation


• Identify materially changed approved use cases requiring re-review


• Own vendor and tool AI risk reviews and coordinate vendor risk disposition through Ironclad


• Develop an agentic AI review approach with AI Technology & Innovation


• Build visibility into unapproved AI usage and administer AI governance/discovery tooling


• Support teams using unapproved tools in migrating to approved alternatives


• Track and report governance health metrics to the Senior Manager


• Maintain awareness of the AI regulatory landscape and support a regulatory register


• Draft and refine AI governance policies, standards, and guidelines with the Senior Manager

Requirements

• Experience in AI/technology governance, risk management, or compliance operations, ideally in a matrixed enterprise environment


• Working knowledge of legal and regulatory considerations related to AI, data privacy, vendor risk, and responsible technology governance


• Data privacy experience, including working knowledge of data classification and privacy impact assessment methodology


• Working knowledge of GRC processes and third-party/vendor risk review


• Experience with AI discovery, monitoring, or governance tooling, including hands-on administration


• Ability to operate independently against a governance framework that is still maturing


• Autonomous decision making to assess when and what level of governance assessment is needed


• Strong cross-functional coordination skills


• Privacy certification (e.g., CIPP/E, CIPM) alongside AI governance training or audit credential (preferred)


• Familiarity with AI-specific risk considerations, including model risk, agentic system risk, and bias/explainability (preferred)


• Experience standing up or operating governance committee structures (preferred)

Core Competencies

Demonstrates expertise in AI governance, risk management, and compliance operations, with a strong focus on data privacy and regulatory considerations. Proficient in evaluating AI use cases and vendor risk while maintaining governance records and metrics.

Highest-signal resume keywords

• AI Governance


• Risk Management


• Data Privacy Impact Assessment


• Vendor Risk Review


• GRC Processes

Hard Skills

• AI Risk Assessment


• Data Classification


• Privacy Impact Assessment Methodology


• AI Discovery Tooling


• Governance Framework Implementation

Soft Skills

• Cross-Functional Coordination


• Autonomous Decision Making

Certifications & Qualifications

• CIPP/E


• CIPM

Industry Keywords

• AI Regulatory Landscape


• Responsible Technology Governance


• Bias and Explainability


• Governance Committee Structures

Tools & Technologies

• AI Governance Tooling


• Ironclad