AI Governance Specialist

Ethicalhat; India; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Ethicalhat in India seeks an AI Governance Specialist to design and manage governance and risk controls for AI systems, including Generative AI, across the enterprise.

You will collaborate with technology, security, privacy, legal and business teams to implement policies, risk assessments and regulatory alignment for responsible AI adoption.

Qualifications

• 5+ years of experience in technology risk, cybersecurity governance, IT risk, privacy, compliance or AI governance.
• Strong understanding of AI/ML and Generative AI concepts.
• Working knowledge of NIST AI RMF and ISO/IEC 42001.
• Familiarity with AI regulatory developments including the EU AI Act.
• Ability to evaluate AI risks and communicate business, regulatory and security implications to stakeholders.
• Strong analytical, documentation and report-writing skills.

Responsibilities

• Conduct risk and governance assessments for AI and GenAI systems, use cases, and third-party AI services across their lifecycle.
• Develop and maintain AI governance policies, standards, control requirements, risk assessment methodologies and operating procedures.
• Assess AI systems against frameworks and standards such as NIST AI RMF and ISO/IEC 42001.
• Identify and document risks relating to data privacy, cybersecurity, model behaviour, bias, transparency and misuse.
• Support AI use-case intake, risk classification, approval and exception processes based on governance requirements.
• Define and assess controls for AI development, deployment, monitoring, access and data handling.
• Maintain AI inventories, risk registers, assessment records, control evidence and governance documentation.
• Work with AI/ML, cybersecurity, privacy, legal, compliance and business teams to translate governance requirements into practical controls.
• Monitor developments in AI regulations and industry guidance and assess their impact on governance requirements.

Skills

AI governance

Technology risk

Cybersecurity governance

Privacy

Regulatory compliance

Risk assessment

Policy development

Stakeholder communication

AI/ML concepts

Regulatory awareness

Job description

The AI Governance Specialist will support the design, implementation and ongoing management of governance and risk controls for Artificial Intelligence (AI) systems, including Generative AI. The role will help organisations identify and manage risks associated with the development, procurement and use of AI across the enterprise.

The position requires a strong understanding of technology risk, cybersecurity, privacy and AI governance principles. The specialist will conduct AI risk assessments; develop governance policies and control frameworks, support regulatory and standards alignment, and work with technology, security, legal, privacy, risk and business teams to enable responsible adoption of AI.

Key Responsibilities

• Conduct risk and governance assessments for AI and GenAI systems, use cases and third-party AI services across their lifecycle.
• Develop and maintain AI governance policies, standards, control requirements, risk assessment methodologies and operating procedures.
• Assess AI systems against applicable frameworks and standards such as NIST AI RMF, ISO/IEC 42001 and relevant regulatory requirements.
• Identify and document risks relating to data privacy, cybersecurity, model behaviour, bias, transparency, explainability, human oversight and misuse of AI systems.
• Support AI use-case intake, risk classification, approval and exception processes based on defined governance requirements.
• Define and assess controls for AI development, deployment, monitoring, access, data handling, model changes and retirement.
• Evaluate governance and security risks associated with third-party AI models, platforms, APIs and service providers.
• Maintain AI inventories, risk registers, assessment records, control evidence and governance documentation to support internal reviews and audits.
• Work with AI/ML, cybersecurity, privacy, legal, compliance and business teams to translate governance requirements into practical controls.
• Monitor developments in AI regulations, standards and industry guidance and assess their impact on organisational AI governance requirements.

Skills & Experience

• 5+ years of relevant experience in technology risk, cybersecurity governance, IT risk, privacy, compliance, responsible AI or AI governance, with practical exposure to AI-related risk and controls.
• Good understanding of AI/ML and Generative AI concepts, including models, training and inference data, prompts, APIs and common enterprise AI use cases.
• Working knowledge of NIST AI Risk Management Framework (AI RMF) and ISO/IEC 42001.
• Familiarity with AI regulatory developments and governance requirements, including the EU AI Act and other relevant AI regulations or guidance.
• Strong understanding of technology and cybersecurity risk assessment, control design, governance and remediation tracking.
• Understanding of AI-specific risks including data leakage, prompt injection, hallucination, model misuse, bias and third-party/model supply-chain risks.
• Experience conducting control assessments, gap assessments, risk reviews and developing policies, standards and governance documentation.
• Ability to evaluate technical AI risks and communicate their business, regulatory and security implications to relevant stakeholders.
• Strong analytical, documentation and report-writing skills.
• Ability to work effectively with technical teams as well as legal, privacy, compliance, risk and business stakeholders.

Preferred Qualifications

• Certifications or training in ISO/IEC 42001, NIST AI RMF, AI governance, responsible AI, cybersecurity, privacy or technology risk are preferred.
• Certifications such as IAPP AIGP, CISA, CISM, CISSP, CRISC or equivalent will be an advantage.
• Experience supporting AI governance programmes, AI risk assessments, regulatory readiness or responsible AI initiatives in consulting or enterprise environments is preferred.