AI Risk & Compliance Specialist

act digital; Lisboa; Hybrid; EUR 65.000 - 90.000; Vollzeit

Zusammenfassung

act digital is seeking an AI Risk & Compliance Lead to design and maintain the organization’s AI risk management model, ensuring AI-related risks are identified, assessed, monitored and controlled. You will align AI governance with regulatory and information security requirements and translate EU AI Act requirements into actionable risk and compliance tasks.

The role requires building frameworks, conducting AI risk assessments, and coordinating with Business, Technology, Information Security,

Qualifikationen

• Bachelor's degree or equivalent in a relevant field.
• Minimum 5 years of professional experience in Risk Management.
• Proven experience in Compliance, Audit, Internal Control or Technology Risk Management initiatives.
• Practical knowledge of AI Governance and risks related to AI systems.
• Experience defining risk management frameworks and control models.
• Strong knowledge of EU AI Act and compliance requirements.
• Knowledge of NIST AI RMF and ISO 31000.
• Knowledge of ISO 27001 is a plus.
• Experience conducting risk, impact and compliance assessments.
• Good knowledge of data protection, privacy and information security principles.
• Experience defining controls, monitoring indicators and audit mechanisms.
• Understanding AI risks including Explainability, Bias, Model Drift, Human Oversight and AI Incident Management.
• Experience preparing regulatory documentation and audit evidence.
• Strong analytical and problem-solving skills.
• Excellent communication with Business, Technology, Risk, Compliance, and Audit teams.
• Experience in internal audit or operational risk management is a plus.
• Ability to translate regulatory and risk requirements into practical controls and governance mechanisms.
• Preferably immediate availability.

Aufgaben

• Define and structure the AI Risk Management model.
• Ensure alignment between AI Governance and regulatory, compliance, audit, information security, and data protection requirements.
• Analyse EU AI Act requirements and translate them into risk and compliance requirements.
• Develop and maintain AI risk management frameworks, control models, policies and procedures.
• Identify and assess risks associated with AI systems across their lifecycle.
• Conduct AI risk, impact and compliance assessments and document findings.
• Define and implement AI-specific controls, monitoring indicators and oversight mechanisms.
• Establish AI risk monitoring, escalation and reporting processes.
• Assess AI risks related to Explainability, Bias, Model Drift, Human Oversight and Incidents.
• Support AI Incident Management processes and escalation mechanisms.
• Align AI risk management with data protection, privacy and information security.
• Apply NIST AI RMF, ISO 31000 and ISO 27001 where applicable.
• Prepare regulatory documentation, risk assessments, control evidence, and audit documentation.
• Support internal and external audit activities with evidence and controls.
• Collaborate with Business, Technology, Information Security, Data, Compliance, Risk and Audit teams.
• Communicate complex AI risk and regulatory requirements to both technical and non-technical stakeholders.
• Identify gaps in governance and controls and propose remediation actions.
• Support ongoing improvement of the AI Risk & Compliance framework.

Kenntnisse

Risk management

Compliance

Audit

Internal control

Technology risk management

AI governance

AI Act

NIST RMF

ISO 31000

Data protection

Privacy

Information security

Regulatory documentation

Audit evidence

Stakeholder communication

Ausbildung

Bachelor’s degree in Engineering, Business Management, Law, Information Security or related field

Jobbeschreibung

• Bachelor’s degree in Engineering, Business Management, Law, Information Security or a related field.
• Minimum 5 years of professional experience in Risk Management.
• Proven experience in Compliance, Audit, Internal Control or Technology Risk Management initiatives.
• Practical knowledge of AI Governance and the specific risks associated with Artificial Intelligence systems.
• Experience defining risk management frameworks and control models.
• Strong knowledge of the EU Artificial Intelligence Act (AI Act) and its compliance requirements.
• Knowledge of NIST AI Risk Management Framework and ISO 31000.
• Knowledge of ISO 27001 and information security frameworks is a plus.
• Experience conducting risk, impact and compliance assessments.
• Good knowledge of data protection, privacy and information security principles.
• Experience defining controls, monitoring indicators and audit mechanisms.
• Understanding of AI-specific risks and concepts, including Explainability, Bias, Model Drift, Human Oversight and AI Incident Management.
• Experience preparing regulatory documentation and audit evidence.
• Strong analytical and problem-solving skills.
• Excellent communication skills and ability to work with Business, Technology, Risk, Compliance and Audit teams.
• Experience in internal audit or operational risk management is a plus.
• Ability to translate regulatory and risk requirements into practical controls and governance mechanisms.
• Preferably immediate availability.
• Availability to work in a hybrid model in Lisbon.

Responsibilities

• Define and structure the organization’s AI Risk Management model, ensuring that AI-related risks are properly identified, assessed, monitored and controlled.
• Ensure alignment between the AI Governance model and regulatory, compliance, audit, information security and data protection requirements.
• Analyse the requirements of the EU AI Act and translate them into actionable risk and compliance requirements.
• Develop and maintain AI risk management frameworks, control models, policies and procedures.
• Identify and assess risks associated with AI systems throughout their lifecycle.
• Conduct AI risk, impact and compliance assessments, documenting findings and recommending appropriate mitigation measures.
• Define and implement AI-specific controls, monitoring indicators and oversight mechanisms.
• Establish mechanisms for AI risk monitoring, escalation and reporting.
• Assess AI risks related to Explainability, Bias, Model Drift, Human Oversight and AI Incidents.
• Support the definition of processes for AI Incident Management and appropriate escalation mechanisms.
• Ensure appropriate alignment between AI risk management, data protection, privacy and information security requirements.
• Apply relevant frameworks and standards, including NIST AI RMF, ISO 31000 and ISO 27001, where applicable.
• Prepare regulatory documentation, risk assessments, control evidence and audit documentation.
• Support internal and external audit activities, ensuring that appropriate evidence and controls are available.
• Work closely with Business, Technology, Information Security, Data, Compliance, Risk and Audit teams.
• Communicate complex AI risk and regulatory requirements clearly to both technical and non-technical stakeholders.
• Identify gaps in existing governance and control environments and recommend remediation actions.
• Support the continuous improvement of the organization’s AI Risk & Compliance framework as regulations, technologies and business requirements evolve.