Job Information

The Enterprise Risk Management division at U.S. FinTech is seeking a Senior IT and AI/ML Risk Associate with experience in Artificial Intelligence (AI), Generative AI (GenAI), Machine Learning (ML), and Data risk management. This role will report to the Director of Technology and Cybersecurity Risk. The successful candidate will perform Artificial Intelligence, Machine Learning, Generative AI and Data Related Risk assessments, support the implementation of effective risk management practices to mitigate and/or remediate risk, and provide guidance to technology, operations, information security and other business partners/teams. The Senior Associate will provide effective review and challenge to help identify existing and emerging risks, and subsequent risk mitigation strategies, to ensure compliance with the organization’s policies, programs, standards, and related regulatory requirements. Partnership and collaborative skills will be critical for success in this role.

Key Job Functions

• Artificial Intelligence, Generative AI, Machine learning (ML) and Data Risk management, responsible for executing completion  of comprehensive risk assessments, documentation, risk mitigation guidance, and related reporting for key enterprise initiatives, across various technologies, platforms/environments (i.e., Cloud, AI, etc.) including efforts relative to supporting external partners and/or clients.
• Monitor and report on AI, GenAi and Data management (data management), related key and emerging risks impacting and/or potentially impacting the enterprise, from a second line risk management perspective.
• Supporting and overseeing AI, GenAI and Data Technology, Operations, Data Governance functions and related environments.
• Provide Second Line Risk guidance, assessment, and oversight of U.S. FinTech’s information security solutions.
• Partner with key business stakeholders to identify and assess risks and controls across AI/ML, Business Resiliency, Information Security, and Technology.
• Develop and improve Risk and Control Matrix (RCM) pursuant to U.S. FinTech business objectives, regulatory requirements, NIST, SOC, COBIT other industry risk and control frameworks.
• Support quarterly Risk and Control Self-Assessments (RCSAs) and provide guidance related to remediation of inadequate controls, as necessary, second line risk management perspective, through influence.
• Provide credible challenges to business assessments through evidence review and analysis.
• Conduct Assurance reviews of technology/information security and business resiliency related issues, as needed, prior to closure; and review/effective challenge to First-Line Management (FLM) Control tests.
• Identify technology, information security/management and/or business resiliency risk and control considerations for new business initiatives and/or existing process enhancements.
• Work directly with front-line management to prioritize on-going remediation and other key activities related to effective and timely technology, information security, and business resiliency risk management.
• Work directly with Internal Audit, Compliance, and Regulatory agencies to foster open communication and transparency.
• Work with the business to develop plans to mitigate Ai, GenAI, Data technology, risks, and program performance issues.
• As necessary, perform gap and data analysis to address program gaps or deficiencies related to AI, GenAI, Data based on industry standards/best practices, and related regulatory requirements.