Advisor-IT Risk and Compliance

FedEx Freight; Memphis, Northern (TN, KY); Hybrid; USD 84,000 - 161,000; Full time

Job summary

FedEx Freight seeks a senior leader to spearhead the enterprise AI governance and security program within the InfoSec GRC organization. You will design frameworks to manage AI risk and ensure security compliance across the enterprise.

You will align AI security practices with the NIST AI RMF, implement automated reviews, and collaborate with Application Security, Data Security, and Dev teams to translate policy into practice.

Qualifications

• Bachelor's degree in business, Computer Science, Information Systems or related field.
• Five (5) years’ experience in information technology, cybersecurity, GRC, technology risk, application security or data privacy.
• Knowledge of enterprise technology, governance functions, framework structures, and the operational application of the NIST AI Risk Management Framework.
• Proven background in Application security and/or data security environments.

Responsibilities

• Design, implement, and operationalize enterprise-wide InfoSec AI cybersecurity governance framework and risk reviews in close partnership with other InfoSec SMEs, Platform Owners and AppDev.
• Align corporate AI security practices and frameworks with the NIST AI Risk Management Framework (AI RMF) and applicable legal, regulatory, and cybersecurity standards.
• Develop, deploy, and manage an automated review system for enterprise AI security compliance, including handling protocols for unapproved AI network activity.
• Partner cross-functionally with Application Security, Data Security, Data Governance, and Application Development teams to review solutions, establish AI tool parameters, and clearly convey security compliance requirements.
• Stay abreast of rapid industry advancements in generative and agentic AI to translate emerging threats into actionable GRC processes.
• Evaluate risk profiles of third-party enterprise AI assets and software platforms to align with centralized corporate inventory of approved vs. unapproved models and integrations.
• Prepare materials and present AI risk assessments, mitigation strategies, and program maturity roadmaps to executive leadership.
• Comply with all applicable laws/regulations, as well as company policies/procedures
• Perform other duties as required

Skills

GRC experience

AI governance

Executive communication

Cross-functional collaboration

Security governance

Ambiguity tolerance

AI platforms familiarity

Education

Bachelor's degree in business/CS/IS

Job description

POSITION OVERVIEW

Responsible for spearheading the enterprise AI governance and security program. Position sits within the InfoSec Governance, Risk, and Compliance (GRC) organization; and for developing and implementing the AI cybersecurity governance frameworks.

ESSENTIAL JOB DUTIES/RESPONSIBILITIES

• Design, implement, and operationalize enterprise-wide InfoSec AI cybersecurity governance framework and risk reviews in close partnership with other InfoSec SMEs, Platform Owners and AppDev.
• Align corporate AI security practices and frameworks with the NIST AI Risk Management Framework (AI RMF) and applicable legal, regulatory, and cybersecurity standards.
• Develop, deploy, and manage an automated review system for enterprise AI security compliance, including the handling of protocols for unapproved AI network activity.
• Partner cross-functionally with Application Security, Data Security, Data Governance, and Application Development teams to review solutions, establish AI tool parameters, and clearly convey security compliance requirements.
• Stay abreast of rapid industry advancements in generative and agentic AI to translate emerging threats into actionable GRC processes.
• Evaluate risk profiles of third-party enterprise AI assets and software platforms to align with centralized corporate inventory of approved vs. unapproved models and integrations.
• Prepare materials and present AI risk assessments, mitigation strategies, and program maturity roadmaps to executive leadership.
• Comply with all applicable laws/regulations, as well as company policies/procedures
• Perform other duties as required

Disclaimer: This job description is general in nature and is not designed to contain or to be interpreted as a comprehensive inventory of all duties, essential functions and qualifications required of employees assigned to the job.

QUALIFICATIONS

• Bachelor’s degree in business, Computer Science, Information Systems or related field.
• Five (5) years’ experience in information technology, cybersecurity, GRC, technology risk, application security or data privacy.
• Knowledge of enterprise technology, governance functions, framework structures, and the operational application of the NIST AI Risk Management Framework.
• Proven background in Application security and/or data security environments.
• Excellent executive presence with the ability to distill data science and artificial intelligence lifecycle concepts into strategic language for executive leadership.
• Demonstrated ability to operate comfortably with ambiguity.
• Ability to lead the development of compliance workflows from the ground up.
• Strong interpersonal and collaborative skills to partner successfully across both developer groups and non-technical business units.
• Familiarity with enterprise AI platforms such as Microsoft Copilot, Google Gemini, or Claude.
• Relevant professional certifications (e.g., IAPP Certified AI Governance Professional (AIGP), CISM, or CISSP) are preferred.

WORKING CONDITIONS

• Must be able to travel

Pay Transparency

The compensation listed reflects the pay range or rate of pay reasonably expected for this posted position at the posted location(s). If this opportunity includes multiple job levels, the pay information represents the minimum and maximum range for all levels. Actual pay is determined by job-related factors permitted by law and relevant to the position, such as experience, tenure, market level, pay at the location for this job, performance, schedule, and work assignment.

Eligible employees offered health, vision, dental, life, AD&D, STD and LTD insurance, employee assistance program, personal/sick paid time, 401(k) retirement savings plan, bonus potential, tuition reimbursement, adoption assistance, 2 weeks paid parental leave, paid bereavement, employee discounts, 6.67-13.34 hours vacation per month based on service time, 8 paid holidays.

Pay Range: $83,799.00 - $160,894.00

Colorado Pay Ranges: Colorado Springs, Grand Junction $83,799.00 - $160,894.00; Henderson, Mead $83,799.00 - $160,894.00; Gypsum $83,799.00 - $160,894.00

Illinois Pay Ranges: Effingham, Kankakee, Lincoln, Quincy, Rockford, Aurora $83,799.00 - $160,894.00; Bolingbrook, Chicago Heights, Des Plaines, Elmhurst, Forest View, Joliet, Schaumburg, Summit-Argo, Zion $83,799.00 - $160,894.00

New York Pay Ranges: Plattsburgh, Buffalo, Watertown, North Chili, East Syracuse, Nichols $83,799.00 - $160,894.00; Bethpage, Montgomery, West Babylon $83,799.00 - $160,894.00

New Jersey Job Postings: $83,799.00 - $130,727.00

This compensation range is a reasonable estimate of the current starting pay range in NJ. If this opportunity includes multiple job levels, the range is a reasonable estimate of the current starting salary for the lowest level to the current starting salary of the highest level. Actual starting pay is determined by experience relative to the job, market level, specific location and other job-related factors permitted by law. Regular full & part-time employees (who complete 91 days of employment and work a minimum average of 12 hours per week) are eligible to enroll in medical, dental, and/or vision coverage, tuition reimbursement. Full/part-time employees who are age 21 are eligible for 401(k) after one month of employment.

EST FedEx Freight, IncFedEx Freight is an Equal Opportunity Employer, including disabled and veterans. If you have a disability and you need assistance in order to apply for a position with FedEx Freight, please e-mail at [e-mail]. FedEx Freight will not discharge or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.