Advisor, IT Governance, Risk and Compliance

OP RaaS; Southaven (MS); On-site; USD 110,000 - 170,000; Full time

Job summary

OP RaaS is seeking a senior leader to spearhead the enterprise AI governance and security program within the InfoSec GRC organization. The role focuses on developing and implementing AI cybersecurity governance frameworks and ensuring regulatory alignment.

You will collaborate across security, data, and development teams to operationalize risk reviews, automate compliance, and translate AI threats into actionable governance and policy changes for executives.

Qualifications

• Bachelor's degree in business, CS, information systems or related field.
• 5+ years in IT, cybersecurity, GRC, tech risk, app security or data privacy.
• Knowledge of NIST AI RMF and enterprise governance structures.
• Background in application security and/or data security environments.
• Certifications such as AIGP, CISM or CISSP preferred.

Responsibilities

• Design and implement an enterprise AI cybersecurity governance framework.
• Align AI security practices with NIST AI RMF and regulatory standards.
• Develop an automated system for AI security compliance reviews.
• Partner with security and development teams to set AI tool parameters.
• Translate emerging AI threats into actionable GRC processes.
• Present risk assessments and roadmaps to executive leadership.
• Ensure compliance with laws, regulations and company policies.

Skills

Executive presence

Leadership

Cross-functional collaboration

AI governance

Security governance

Regulatory compliance

Communication with executives

Education

Bachelor's degree

Job description

POSITION OVERVIEW:

Responsible for spearheading the enterprise AI governance and security program. Position sits within the InfoSec Governance, Risk, and Compliance (GRC) organization; and for developing and implementing the AI cybersecurity governance frameworks.

ESSENTIAL JOB DUTIES/RESPONSIBILITIES:

• Design, implement, and operationalize enterprise-wide InfoSec AI cybersecurity governance framework and risk reviews in close partnership with other InfoSec SMEs, Platform Owners and AppDev.
• Align corporate AI security practices and frameworks with the NIST AI Risk Management Framework (AI RMF) and applicable legal, regulatory, and cybersecurity standards.
• Develop, deploy, and manage an automated review system for enterprise AI security compliance, including the handling of protocols for unapproved AI network activity.
• Partner cross-functionally with Application Security, Data Security, Data Governance, and Application Development teams to review solutions, establish AI tool parameters, and clearly convey security compliance requirements.
• Stay abreast of rapid industry advancements in generative and agentic AI to translate emerging threats into actionable GRC processes.
• Evaluate risk profiles of third-party enterprise AI assets and software platforms to align with centralized corporate inventory of approved vs. unapproved models and integrations.
• Prepare materials and present AI risk assessments, mitigation strategies, and program maturity roadmaps to executive leadership.
• Comply with all applicable laws/regulations, as well as company policies/procedures
• Perform other duties as required

Disclaimer

This job description is general in nature and is not designed to contain or to be interpreted as a comprehensive inventory of all duties, essential functions and qualifications required of employees assigned to the job.

QUALIFICATIONS:

• Bachelor’s degree in business, Computer Science, Information Systems or related field.
• Five (5) years’ experience in information technology, cybersecurity, GRC, technology risk, application security or data privacy.
• Knowledge of enterprise technology, governance functions, framework structures, and the operational application of the NIST AI Risk Management Framework.
• Proven background in Application security and/or data security environments.
• Excellent executive presence with the ability to distill data science and artificial intelligence lifecycle concepts into strategic language for executive leadership.
• Demonstrated ability to operate comfortably with ambiguity.
• Ability to lead the development of compliance workflows from the ground up.
• Strong interpersonal and collaborative skills to partner successfully across both developer groups and non-technical business units.
• Familiarity with enterprise AI platforms such as Microsoft Copilot, Google Gemini, or Claude.
• Relevant professional certifications (e.g., IAPP Certified AI Governance Professional (AIGP), CISM, or CISSP) are preferred.

WORKING CONDITIONS:

• Must be able to travel