AI Risk & Compliance Architect

act digital; Lisboa; Hybrid; EUR 65.000 - 90.000; Vollzeit

Zusammenfassung

act digital is seeking an AI Risk & Compliance Lead to design and maintain the organization’s AI risk management model, ensuring AI-related risks are identified, assessed, monitored and controlled. You will align AI governance with regulatory and information security requirements and translate EU AI Act requirements into actionable risk and compliance tasks.

The role requires building frameworks, conducting AI risk assessments, and coordinating with Business, Technology, Information Security,

Qualifikationen

• Bachelor's degree or equivalent in a relevant field.
• Minimum 5 years of professional experience in Risk Management.
• Proven experience in Compliance, Audit, Internal Control or Technology Risk Management initiatives.
• Practical knowledge of AI Governance and risks related to AI systems.
• Experience defining risk management frameworks and control models.
• Strong knowledge of EU AI Act and compliance requirements.
• Knowledge of NIST AI RMF and ISO 31000.
• Knowledge of ISO 27001 is a plus.
• Experience conducting risk, impact and compliance assessments.
• Good knowledge of data protection, privacy and information security principles.
• Experience defining controls, monitoring indicators and audit mechanisms.
• Understanding AI risks including Explainability, Bias, Model Drift, Human Oversight and AI Incident Management.
• Experience preparing regulatory documentation and audit evidence.
• Strong analytical and problem-solving skills.
• Excellent communication with Business, Technology, Risk, Compliance, and Audit teams.
• Experience in internal audit or operational risk management is a plus.
• Ability to translate regulatory and risk requirements into practical controls and governance mechanisms.
• Preferably immediate availability.

Aufgaben

• Define and structure the AI Risk Management model.
• Ensure alignment between AI Governance and regulatory, compliance, audit, information security, and data protection requirements.
• Analyse EU AI Act requirements and translate them into risk and compliance requirements.
• Develop and maintain AI risk management frameworks, control models, policies and procedures.
• Identify and assess risks associated with AI systems across their lifecycle.
• Conduct AI risk, impact and compliance assessments and document findings.
• Define and implement AI-specific controls, monitoring indicators and oversight mechanisms.
• Establish AI risk monitoring, escalation and reporting processes.
• Assess AI risks related to Explainability, Bias, Model Drift, Human Oversight and Incidents.
• Support AI Incident Management processes and escalation mechanisms.
• Align AI risk management with data protection, privacy and information security.
• Apply NIST AI RMF, ISO 31000 and ISO 27001 where applicable.
• Prepare regulatory documentation, risk assessments, control evidence, and audit documentation.
• Support internal and external audit activities with evidence and controls.
• Collaborate with Business, Technology, Information Security, Data, Compliance, Risk and Audit teams.
• Communicate complex AI risk and regulatory requirements to both technical and non-technical stakeholders.
• Identify gaps in governance and controls and propose remediation actions.
• Support ongoing improvement of the AI Risk & Compliance framework.

Kenntnisse

Risk management

Compliance

Audit

Internal control

Technology risk management

AI governance

AI Act

NIST RMF

ISO 31000

Data protection

Privacy

Information security

Regulatory documentation

Audit evidence

Stakeholder communication

Ausbildung

Bachelor’s degree in Engineering, Business Management, Law, Information Security or related field

Jobbeschreibung

act digital is seeking an AI Risk & Compliance Lead to design and maintain the organization’s AI risk management model, ensuring AI-related risks are identified, assessed, monitored and controlled. You will align AI governance with regulatory and information security requirements and translate EU AI Act requirements into actionable risk and compliance tasks.

The role requires building frameworks, conducting AI risk assessments, and coordinating with Business, Technology, Information Security,