AI Governance Lead

M&T Bank Corporation; Buffalo (NY); On-site; USD 124,000 - 206,000; Full time

Benefits offered by this job

Forty hours of paid volunteer time

Competitive benefits

Job summary

M&T Bank Corporation is seeking a senior leader to own the design and execution of the enterprise AI governance program. You will build standards, policies, and procedures that govern AI use cases and models as they move from idea to production, structuring the roadmap across intake, classification, value assessment, and control design.

You will stand up use case governance and model governance functions, define the target state for AI governance, and drive an implementation plan with monitoring

Qualifications

• Combined minimum of 10 years' higher education and/or operational/business analytics/systems development experience.
• Demonstrated experience building a governance framework or program from the ground up in a large or complex organization.
• Working knowledge of model risk management practices (e.g., SR 11-7 or equivalent) and how they extend to AI/ML systems.
• Experience designing intake, classification, and risk assessment processes for technology or data initiatives.
• Experience working cross-functionally with engineering, legal, compliance, and business teams.
• Strong written communication skills; able to produce policy documents, standards, and executive-level reporting.
• Bachelor's degree in a relevant field; advanced degree a plus but not required in place of experience.

Responsibilities

• Governance Framework Design: author and maintain AI governance standards, policies, and procedures covering the full lifecycle of AI use cases and models.
• Design the governance roadmap organized into intake, classification, value assessment, and control design stages.
• Define risk tiers and controls proportional to use case risk (e.g., low/medium/high risk classification tied to required controls).
• Use Case Governance: build the intake process for new AI use cases: how requests enter the pipeline, what information is captured, who reviews them.
• Establish classification criteria (risk level, data sensitivity, regulatory exposure, business criticality).
• Design value assessment methodology to prioritize use cases against cost, risk, and business impact.
• Define control requirements per classification tier (documentation, testing, sign-off, monitoring).
• Model Governance: establish model risk management practices: validation, documentation, versioning, approval gates.
• Define requirements for model cards, testing evidence, bias/fairness checks, and performance monitoring.
• Set standards for third-party and open-source model vetting.
• Target State & Team Build: define the target state for AI governance, design the governance team structure, roles, and operating model.
• Set RACI across governance, engineering, legal, risk, and business stakeholders.
• Implementation & Monitoring: build a phased implementation plan with milestones and owners; establish KPIs and escalation paths.

Skills

Policy writing

Risk classification

Stakeholder mgmt

Program mgmt

ML lifecycle

Data literacy

Facilitation

Education

Bachelor's degree in a relevant field

Job description

Role Summary

Own the design and execution of the enterprise AI governance program. Build the standards, policies, and procedures that govern how AI use cases and models move from idea to production. Structure the governance roadmap across intake, classification, value assessment, and control design. Stand up use case governance and model governance functions, define the target state for AI governance across the organization, and drive an implementation plan with clear monitoring, prioritized against engineering delivery timelines.

Key Responsibilities

• Governance Framework DesignAuthor and maintain AI governance standards, policies, and procedures covering the full lifecycle of AI use cases and models
• Design the governance roadmap organized into intake, classification, value assessment, and control design stages
• Define risk tiers and controls proportional to use case risk (e.g., low/medium/high risk classification tied to required controls)
• Use Case GovernanceBuild the intake process for new AI use cases: how requests enter the pipeline, what information is captured, who reviews them
• Establish classification criteria (risk level, data sensitivity, regulatory exposure, business criticality)
• Design value assessment methodology to prioritize use cases against cost, risk, and business impact
• Define control requirements per classification tier (documentation, testing, sign-off, monitoring)
• Model GovernanceEstablish model risk management practices: validation, documentation, versioning, approval gates
• Define requirements for model cards, testing evidence, bias/fairness checks, and performance monitoring
• Set standards for third-party and open-source model vetting
• Target State & Team BuildDefine the target state for AI governance: what \"good\" looks like, what the organization should expect from the function
• Design the governance team structure, roles, and operating model
• Set RACI across governance, engineering, legal, risk, and business stakeholders
• Implementation & MonitoringBuild a phased implementation plan with milestones and owners
• Prioritize governance rollout in sequence with engineering platform and architecture delivery
• Establish monitoring and reporting: KPIs, compliance tracking, exception handling, escalation paths
• Run periodic reviews of the governance program's effectiveness and adjust as needed

Required Qualifications

• Combined minimum of 10 years' higher education and/or operational/business analytics/systems development experience
• Demonstrated experience building a governance framework or program from the ground up in a large or complex organization
• Working knowledge of model risk management practices (e.g., SR 11-7 or equivalent) and how they extend to AI/ML systems
• Experience designing intake, classification, and risk assessment processes for technology or data initiatives
• Experience working cross-functionally with engineering, legal, compliance, and business teams
• Strong written communication skills; able to produce policy documents, standards, and executive-level reporting
• Bachelor's degree in a relevant field (risk, business, computer science, law, or similar); advanced degree a plus but not required in place of experience

Preferred Qualifications

• Direct experience with AI-specific regulatory frameworks (EU AI Act, NIST AI RMF, ISO/IEC 42001) and applying them practically
• Prior experience standing up or scaling a governance team, including hiring and role design
• Familiarity with MLOps and model deployment pipelines, enough to design controls that don't bottleneck engineering
• Experience with generative AI governance specifically (prompt/data leakage risk, hallucination controls, third-party LLM vendor risk)
• Certifications such as CRISC, CISA, or AI governance-specific credentials
• Experience in a regulated industry (financial services, healthcare, insurance)

Skills Required

• Policy and standards writing
• Risk classification and control design
• Stakeholder management across technical and non-technical audiences
• Program/project management (roadmap building, milestone tracking, prioritization)
• Working knowledge of ML lifecycle and model development practices
• Data literacy: able to read model documentation, validation reports, and technical risk assessments
• Facilitation and negotiation, particularly balancing governance rigor against engineering velocity

Pay & Location

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $123,600.00 - $206,000.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location: Buffalo, New York, United States of America

Company Culture & Benefits

• Competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year.

Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution. As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members. View M&T’s Human Capital Report to learn more.

Equal Employment Opportunity

M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws. M&T Bank Corporation has policies and procedures in place to promote a drug free workplace.