Principal - Technology Risk and Control - Artificial Intelligence & Cloud Risk

Tasks

• Enterprise Framework & Controls:
  • Drive the development of a company-wide AI and cloud risk and control framework, in partnership with AI (Alpha, model risk, cyber risk, data protection, information, and third parties), to implement and monitor controls for AI and the associated model risk.
  • Define outcomes for shared frameworks to improve alignment, increase the efficiency of controls, and eliminate data-sensitive restrictions across the entire company.
  • Define scalable control frameworks to support consistent knowledge and audit/cloud best practices.
  • Define relevant control dependencies for all cloud services and all ad hoc deliveries (capture all AI and cloud risk information).
• AI & Cloud Risk Assessment:
  • Work with the company-wide AI and cloud risk management and monitoring unit to conduct risk-based knowledge assessments and evaluations.
  • Conduct ad hoc risk assessments related to company-wide drivers and the associated unit, including model/detail follow-up. Collaborate with BAU teams that provide data for the framework: Risk Management, Security, Product, and Operations.
  • Assess incidents related to risks, cloud/data protection, and audit controls; identify emerging trends; monitor necessary actions; and provide remedial responses.
• Governance Policies & Frameworks:
  • Establish governance for ad hoc asset controls and ensure that controls are established by design and can be adapted to meet data security, compliance, and company-wide requirements.
  • Define standards for shared strengths, including logging, applications, and solutions.
  • Report on the top 8 causes of weaknesses in risk assessment and the remediation measures for the affected non-AI portfolio.
  • Propose processes, tools, and systems that enhance security.
  • Implement alignment with internal standards, model risk governance, and audits of all exposure assessments.
  • Simplify integration requirements for expanding AI capabilities and cloud service controls.
  • As more AI-powered tools are added and deployed to support new customers, cloud services, products, data, risk factors, and security controls, the risk of major data breaches is increasing.
• Reporting & Monitoring:
  • Develop playgrounds and platforms to effectively isolate all cloud risk points.
  • Create a risk dashboard framework for proposals to the Engagement Unit team.
  • As more AI-powered tools and platforms are deployed to support new customers, cloud services, products, data, risk factors, and security controls, these factors pose a growing risk of major data breaches.
  • Create a risk dashboard framework for proposals to the Engagement Unit team.

Requirements

• 10 years of experience in technical security, cyber risk, data risk, cloud, AI, or related disciplines, with proven enterprise-wide responsibility.
• Technology professionals with expertise in technology, platforms, AI, or data science.