Director, Artificial Intelligence Risk Management

BNY; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

BNY is seeking a senior AI Risk leader to build and guide the second line of defense for AI risk across the organization. The role focuses on creating and evolving the AI risk framework, governance, and controls while partnering with risk and technology stakeholders to enable safe innovation.

The successful candidate will oversee risk identification, measurement, monitoring, and issue remediation, providing clear insights to senior leadership and governance forums.

Qualifications

• Strong risk management experience across technology, cyber, data, model, or AI risk.
• Proven expert in building or enhancing risk programs and oversight capabilities.
• Ability to advise and credibly challenge senior leaders including technologists.
• Experience applying risk frameworks across identification, assessment, monitoring, governance and issues.

Responsibilities

• Build, lead, and sustain the AI Risk team and its operating model as AI adoption and threat environment evolve.
• Provide strategic second line of defense advice to senior management and platform leaders.
• Establish and evolve an enterprise AI Risk framework including governance and control expectations.
• Oversee AI risk identification, assessment, monitoring, governance, and remediation across the lifecycle.
• Challenge AI adoption decisions and risk controls when needed to align with business priorities.
• Coordinate with Risk & Compliance and other control functions to address AI as a transversal risk.
• Monitor AI technology, regulation, and threat environment and adjust the risk program accordingly.
• Provide reporting and risk insights to senior leadership and governance forums.

Job description

Job Description

This exciting role entails one thing: building and sustaining credible second line of defense oversight of AI risk across BNY. Activities include, but are not limited to:

• Build, lead, and sustain the newly established AI Risk team and its operating model as AI adoption, business use cases, and the threat environment evolve.


• Provide strategic second line of defense advice and credible challenge to senior first line of defense management, including senior technologists in the AI Hub and platform leaders integrating AI into their businesses.


• Establish and evolve a proportionate enterprise AI Risk framework, including risk principles, requirements, governance, and control expectations.


• Exercise judgment and make decisions on how to achieve short- and long-term goals when raising or creating new AI risk management requirements for the business.


• Oversee AI risk identification, assessment, measurement, monitoring, governance, and issue management across the risk management lifecycle.


• Challenge AI adoption decisions and control approaches when needed, including where risk considerations may affect business priorities or delivery outcomes.


• Coordinate across Risk & Compliance and other control functions to address AI as a transversal risk and align oversight with enterprise risk management and regulatory expectations.


• Monitor changes in AI technology, business adoption, regulation, and the threat environment, and translate them into proportionate adjustments to the AI Risk program.


• Provide clear reporting and risk insights to senior leadership and governance forums on AI risk exposure, control gaps, issues, and remediation progress.


• Promote responsible AI adoption by partnering with stakeholders to enable innovation while upholding the Firm’s risk principles.

To be successful in this role, we're seeking the following:

• 10+ years of relevant experience in risk management, technology risk, cyber risk, data risk, model risk, or AI risk, including significant on-the-job risk management experience within a highly regulated financial institution.


• Strong AI risk subject matter expertise and practical knowledge of the risks and controls associated with enterprise AI adoption.


• Robust knowledge of how to apply and sustain a risk management framework across risk identification, assessment, measurement, monitoring, governance, and issue management.


• Demonstrated ability to build or materially enhance a risk program or oversight capability in a complex organization.


• Proven ability to advise, influence, and credibly challenge senior technology and business leaders, including when risk requirements may affect strategic priorities or delivery timelines.


• Strong judgment and strategic thinking, with the ability to establish proportionate requirements in a rapidly changing business, technology, and threat environment.


• Experience working across Risk & Compliance and partnering with first and second line stakeholders on transversal risk matters.


• Excellent written and verbal communication skills, with the ability to translate complex AI and risk topics into clear, decision-oriented messages.


• Relentless curiosity and a passion for enabling safe, high-impact innovation.