Advisor-IT Risk and Compliance

FedEx Freight, Inc.; Southwind (TN); Remote; USD 84,000 - 161,000; Full time

Job summary

FedEx Freight, Inc. is seeking a leader to spearhead the enterprise AI governance and security program within the InfoSec GRC organization. The role focuses on developing and implementing AI cybersecurity governance frameworks across the company.

You will partner with Application Security, Data Security, and Dev teams, align AI security with NIST AI RMF, review third-party AI assets, and present risk roadmaps to executives while ensuring compliance with applicable laws and FedEx policies.

Qualifications

• Bachelor's degree in business, CS, information systems or related field.
• Five years of experience in IT, cybersecurity, GRC, technology risk, application security or data privacy.
• Knowledge of enterprise technology, governance structures, and NIST AI RMF.
• Background in application security and/or data security environments.
• Ability to distill AI lifecycle concepts into executive language and work across teams.
• Willingness to lead compliance workflows from the ground up.
• Familiarity with enterprise AI platforms such as Copilot, Gemini or Claude.
• Certifications (e.g., AIGP, CISM, CISSP) are preferred.

Responsibilities

• Design, implement, and operationalize enterprise-wide AI cybersecurity governance framework and risk reviews.
• Align AI security practices with NIST AI RMF and applicable standards.
• Develop automated AI security compliance review system for enterprise use.
• Partner with App Security, Data Security, Data Governance, and Dev teams to set AI tool parameters and security requirements.
• Stay current on AI threats and translate into GRC processes.
• Evaluate risk profiles of third-party AI assets to align with approved models.
• Prepare materials and present AI risk assessments and roadmaps to executives.
• Comply with laws, regulations, and company policies.
• Perform other duties as required.

Skills

AI governance

InfoSec risk

Executive communication

Ambiguity tolerance

Security frameworks

Regulatory compliance

Collaboration

AI platforms familiarity

Education

Bachelor's degree in business, CS, IS or related field

Tools

GRC platforms

AI security tooling

Job description

While this is a remote position, the successful candidate must reside within 50 miles of a FedEx Freight location within the continental US.

POSITION OVERVIEW:

Responsible for spearheading the enterprise AI governance and security program. Position sits within the InfoSec Governance, Risk, and Compliance (GRC) organization; and for developing and implementing the AI cybersecurity governance frameworks.

ESSENTIAL JOB DUTIES/RESPONSIBILITIES:

• Design, implement, and operationalize enterprise-wide InfoSec AI cybersecurity governance framework and risk reviews in close partnership with other InfoSec SMEs, Platform Owners and AppDev.
• Align corporate AI security practices and frameworks with the NIST AI Risk Management Framework (AI RMF) and applicable legal, regulatory, and cybersecurity standards.
• Develop, deploy, and manage an automated review system for enterprise AI security compliance, including the handling of protocols for unapproved AI network activity.
• Partner cross-functionally with Application Security, Data Security, Data Governance, and Application Development teams to review solutions, establish AI tool parameters, and clearly convey security compliance requirements.
• Stay abreast of rapid industry advancements in generative and agentic AI to translate emerging threats into actionable GRC processes.
• Evaluate risk profiles of third-party enterprise AI assets and software platforms to align with centralized corporate inventory of approved vs. unapproved models and integrations.
• Prepare materials and present AI risk assessments, mitigation strategies, and program maturity roadmaps to executive leadership.
• Comply with all applicable laws/regulations, as well as company policies/procedures
• Perform other duties as required

Disclaimer: This job description is general in nature and is not designed to contain or to be interpreted as a comprehensive inventory of all duties, essential functions and qualifications required of employees assigned to the job.

QUALIFICATIONS:

• Bachelor's degree in business, Computer Science, Information Systems or related field.
• Five (5) years' experience in information technology, cybersecurity, GRC, technology risk, application security or data privacy.
• Knowledge of enterprise technology, governance functions, framework structures, and the operational application of the NIST AI Risk Management Framework.
• Proven background in Application security and/or data security environments.
• Excellent executive presence with the ability to distill data science and artificial intelligence lifecycle concepts into strategic language for executive leadership.
• Demonstrated ability to operate comfortably with ambiguity.
• Ability to lead the development of compliance workflows from the ground up.
• Strong interpersonal and collaborative skills to partner successfully across both developer groups and non-technical business units.
• Familiarity with enterprise AI platforms such as Microsoft Copilot, Google Gemini, or Claude.
• Relevant professional certifications (e.g., IAPP Certified AI Governance Professional (AIGP), CISM, or CISSP) are preferred.

WORKING CONDITIONS:

• Must be able to travel

Pay Transparency:

The compensation listed reflects the pay range or rate of pay reasonably expected for this posted position at the posted location(s). If this opportunity includes multiple job levels, the pay information represents the minimum and maximum range for all levels. Actual pay is determined by job-related factors permitted by law and relevant to the position, such as experience, tenure, market level, pay at the location for this job, performance, schedule, and work assignment. Eligible employees offered health, vision, dental, life, AD&D, STD and LTD insurance, employee assistance program, personal/sick paid time, 401(k) retirement savings plan, bonus potential, tuition reimbursement, adoption assistance, 2 weeks paid parental leave, paid bereavement, employee discounts, 6.67-13.34 hours vacation per month based on service time, 8 paid holidays.

Pay Range: $83,799.00 - $160,894.00

Colorado Pay Ranges: Colorado Springs, Grand Junction $83,799.00 - $160,894.00; Henderson, Mead $83,799.00 - $160,894.00; Gypsum $83,799.00 - $160,894.00

Illinois Pay Ranges: Effingham, Kankakee, Lincoln, Quincy, Rockford, Aurora $83,799.00 - $160,894.00; Bolingbrook, Chicago Heights, Des Plaines, Elmhurst, Forest View, Joliet, Schaumburg, Summit-Argo, Zion $83,799.00 - $160,894.00

New York Pay Ranges: Plattsburgh, Buffalo, Watertown, North Chili, East Syracuse, Nichols $83,799.00 - $160,894.00; Bethpage, Montgomery, West Babylon $83,799.00 - $160,894.00

New Jersey Job Postings: $83,799.00 - $130,727.00

This compensation range is a reasonable estimate of the current starting pay range in NJ. If this opportunity includes multiple job levels, the range is a reasonable estimate of the current starting salary for the lowest level to the current starting salary of the highest level. Actual starting pay is determined by experience relative to the job, market level, specific location and other job-related factors permitted by law. Regular full & part-time employees (who complete 91 days of employment and work a minimum average of 12 hours per week) are eligible to enroll in medical, dental, and/or vision coverage, tuition reimbursement. Full/part-time employees who are age 21 are eligible for 401(k) after one month of employment.

EST FedEx Freight, IncFedEx Freight is an Equal Opportunity Employer, including disabled and veterans. If you have a disability and you need assistance in order to apply for a position with FedEx Freight, please e-mail at [e-mail]. FedEx Freight will not discharge or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.