Associate Director, AI Risk & Credible Challenge

The Depository Trust & Clearing Corporation (DTCC); Tampa (FL); Hybrid; USD 110,000 - 180,000; Full time

Job summary

DTCC is seeking a senior risk professional to lead Credible Challenge assessments on AI risk across the lifecycle. You will partner with CSRO leadership and First Line stakeholders to evaluate controls, document findings, and drive remediation for AI governance, privacy, and cyber risk concerns.

You will apply AI policies and industry frameworks, engage in AI Working Groups, and contribute to policy awareness and training while guiding program enhancements and strategic risk initiatives.

Qualifications

• Minimum of 8 years of related experience in cyber security, cyber operations, cyber risk, IT audit, or technology risk.
• Cyber security risk background with working knowledge of AI/GenAI risk domains (prompt injection, model drift, hallucination, data leakage, shadow AI).
• Bachelor's degree preferred or equivalent experience.
• Professional certifications such as CISSP, CISA, CRISC or equivalent are a plus.
• Knowledge of frameworks and regulations, including CRI, NIST Cybersecurity Framework, FFIEC, NYSDFS.

Responsibilities

• Lead and execute Credible Challenge assessments of First Line AI risk practices across the AI lifecycle.
• Perform walkthroughs, interviews, and evidence reviews to assess the design and operating effectiveness of AI controls.
• Evaluate alignment of First Line AI practices to AI Policy, AI Governance Procedure, AI Acceptable Usage Policy, and applicable frameworks.
• Represent CSRO on the AI Working Groups, applying the AI risk tiering framework to scale challenge intensity.
• Identify, assess, and communicate material AI risks, control gaps, and thematic issues across cyber, model, data, privacy, and third-party risk domains.
• Engage with senior CSRO and First Line stakeholders to discuss assessment results and remediation of AI control deficiencies.
• Contribute to continuous improvement of the Credible Challenge methodology, standards, and templates in the AI domain.
• Support AI policy awareness and acceptable-usage training; assist with regulatory and audit responses on AI (Reg SCI, FRBNY/SEC inquiries).
• Lead and contribute to special projects including program enhancements and senior management presentations.
• Develop, communicate and ensure adherence to department risk policies, procedures and best practices.
• Stay abreast of industry and market events impacting cyber risk management processes.
• Foster regulatory awareness and ensure regulatory compliance.
• Conduct periodic assessments to gauge DTCC's AI risk and awareness; recommend program adjustments.

Skills

Cyber security

AI risk

Risk assessment

Stakeholder engagement

Education

Bachelor's degree or equivalent

Job description

DTCC is seeking a senior risk professional to lead Credible Challenge assessments on AI risk across the lifecycle. You will partner with CSRO leadership and First Line stakeholders to evaluate controls, document findings, and drive remediation for AI governance, privacy, and cyber risk concerns.

You will apply AI policies and industry frameworks, engage in AI Working Groups, and contribute to policy awareness and training while guiding program enhancements and strategic risk initiatives.