The AI Governance Sr Analyst serves as the operational backbone of Zimmer Biomet s AI governance program, reporting into the Privacy team under the direction of senior privacy counsel. This role is responsible for the day-to-day execution of AI governance processes, including AI asset inventory management, risk assessments, policy compliance tracking, regulatory monitoring, and stakeholder reporting. The Sr Analyst works closely with the AI Working Group (AIWG) Governance & Risk Sub-Committee and cross-functional partners across IT, Information Security, Legal, Intellectual Property, Privacy, Quality, and R&D to ensure that AI technologies are adopted responsibly and in compliance with applicable laws, internal policies, and responsible AI principles. This is a remote, individual contributor role that requires strong process discipline, cross-functional coordination skills, and the ability to operate effectively within an evolving governance framework. The Sr Analyst is expected to be a self-directed executor who can also contribute proactive recommendations for improving governance practices.
Maintain and continuously improve the centralized AI asset inventory, ensuring completeness, accuracy, and timely updates across all business units and corporate functions
Manage the intake process for new AI use cases, including vendor and internally developed solutions, routing submissions through appropriate governance review bodies
Track AI assets through their lifecycle, from intake and approval through deployment, monitoring, and retirement, and coordinate periodic reconciliation of AI inventory data across systems and stakeholders
Administer AI risk assessments, applying defined risk classification criteria and escalation procedures, and track risk assessment outcomes, remediation actions, and risk acceptance decisions
Support the operationalization of AI-related regulatory requirements, including the EU AI Act, Colorado AI Act, and other emerging AI regulations, translating compliance obligations into actionable process steps
Support the development, maintenance, and distribution of AI governance policies, standards, and guidance documents in coordination with functional owners across Privacy, Legal, IP, InfoSec, and Quality
Maintain standardized templates, documentation practices, and process workflows for AI governance activities
Design and maintain governance dashboards and reports that provide visibility into AI inventory status, risk posture, compliance metrics, and governance activity
Prepare materials and status updates for the AIWG, Governance and Risk Sub-Committee, and AI SteerCo as needed, and track management action plan progress related to AI governance audit findings
Serve as the primary operational point of contact for AI governance inquiries, working across IT, Information Security, Legal, Intellectual Property, Privacy, Quality, and R&D
Support the Governance and Risk Sub-Committee with meeting preparation, action item tracking, and follow-through on recommendations
Coordinate with Quality and Regulatory Affairs teams to ensure AI governance processes complement, rather than duplicate, existing product-related workflows for SaMD and other regulated AI applications
Working knowledge of responsible AI principles and the risks associated with AI adoption, including bias, transparency, data privacy, security, and intellectual property considerations
Familiarity with AI-related regulatory frameworks such as the EU AI Act, FDA guidance on AI/ML, Colorado AI Act, or similar emerging legislation
Strong organizational and project coordination skills including detail orientation, an ownership mindset, and the ability to manage multiple workstreams across functions simultaneously
Excellent written and verbal communication skills, including effective collaboration with many cross-functional team members and the ability to produce clear reports, dashboards, and governance documentation for diverse audiences
Demonstrated experience administering governance or compliance processes, including intake workflows, risk assessments, inventory management, or audit support
Comfort operating in ambiguity with the ability to work within an evolving governance framework and help shape processes as they mature
Bachelor s degree, preferably in legal studies, information systems, public policy, health sciences, or a related discipline, and 2+ years of related experience, or High School Diploma (or equivalent) and 5+ years of related experience required
Preference for candidates with 5+years of professional experience working in privacy, compliance, risk management, quality systems, or governance within a highly regulated industry (medical devices, pharmaceuticals, healthcare, or financial services)
Must be US-based. Eastern time-zone preferred
Experience with GRC platforms such as OneTrust, AuditBoard, ServiceNow, or similar, preferred
Medical device or life sciences industry experience, preferred
IAPP certification (AIGP, CIPP, CIPM, or CIPT) or similar professional credential, preferred
