AI Governance Lead

Role Overview

• Maintain the cadences, workflows, and hand-offs that keep AI governance running as a repeatable process and track in-flight items through to closure.
• Draft and maintain the company's AI policies, standards, procedures, and guidelines.
• Help implement and operate the platform used as the system of record for AI intake, risk tracking, control documentation, and issue management.
• Work with other stakeholders to design and run the AI controls testing and monitoring program to verify controls are operating as intended and to surface gaps before they become issues.
• Keep the inventory of AI systems and models in use, along with technical and transparency documentation, assessment records, and retention schedules.
• Develop the metrics, dashboards, and reporting cadences that give the broader AI Governance team and leadership a clear view of program health, key risks, and strategic priorities.
• Coordinate the company’s responses to AI-related due diligence requests from customers, vendors, and retail partners.
• Monitor U.S. legal developments and changes in best practices and standards such as the NIST AI RMF and translate them into operational and governance requirements.
• Maintain a current, hands-on understanding of how AI capabilities, tools, deployment patterns, and risks are evolving, and surface gaps or opportunities in the program proactively.
• Build out the AI governance program while embedding a culture of practical, efficient, and well-evidenced compliance across the company.

Requirements

• 5 + years in governance, risk, and compliance (GRC), information security compliance, legal operations, privacy program management, internal audit, or a closely related operational field, including at least 3 years owning or leading a program, workstream, or function.
• Track record of operationalizing a governance or compliance program end-to-end — translating policy and requirements into repeatable processes covering intake, risk assessment, controls, documentation, and reporting.
• Working knowledge of governance program fundamentals: policy management, risk assessment, controls testing, issue management, recordkeeping, and program reporting.
• Strong written and verbal communication, with the ability to translate regulatory or technical requirements into processes that engineering, product, and business teams will adopt.
• Ability to lead through influence across senior, cross-functional stakeholders without direct authority, and to drive decisions to closure.
• Familiarity with at least one recognized AI governance or risk framework (e.g., NIST AI RMF, ISO/IEC 42001).
• A self-starter who stays current on AI developments and applies that knowledge to the program.
• Background in InfoSec GRC or Legal Operations, with exposure to AI, privacy, or emerging-technology governance.
• Working knowledge of AI/ML concepts and hands-on familiarity with AI tools, including generative AI.
• Knowledge of AI governance frameworks and the regulatory landscape — NIST AI RMF, ISO/IEC 42001, and U.S. state AI laws (e.g., Colorado AI Act).
• Experience in regulated consumer financial services or fintech.
• Experience implementing responsible/ethical AI practices — bias and fairness assessment, model risk review, transparency and disclosure, quality and accuracy review.
• Certifications such as AIGP, CIPP/CIPM/CIPT, CISA, CISM, CRISC, or CGRC.

Benefits

• Competitive Compensation + Bonus Potential
• Full Health Benefits; Medical/Dental/Vision/Life Insurance + Paid Parental Leave
• Company Matched 401k
• Paid Time Off + Paid Holidays + Paid Volunteer Time
• Diversity Alliance Resource Groups
• Employee Stock Purchase Program
• Tuition Reimbursement
• Charitable Gift Matching
• Job Required Equipment & Services Will Be Provided