Associate Director - CIB Business Risk - AI Risk Advisory and Governance

Job title: Associate Director - CIB Business Risk - AI Risk Advisory and Governance As an AI Risk Advisory SME, you will play a pivotal role in safeguarding HSBC’s adoption of Generative AI technologies. You’ll be responsible for reviewing and challenging Generative AI use cases from a holistic risk perspective, ensuring robust oversight across model risk, data risk, cyber risk, technology risk, and other emerging risk types. You’ll work closely with business, technology, and risk teams to ensure that AI solutions are deployed safely, ethically, and in line with HSBC’s risk appetite and regulatory expectations.

In This Role, You Will

• Act as a global subject matter expert for AI and emerging technology risks within CIB, providing clear, actionable risk advisory to senior stakeholders.
• Review and challenge generative AI use cases, identifying and evaluating risks across model, data, cyber, technology, operational and reputational domains
• Develop, enhance, and implement risk management assessments and controls tailored to Generative AI and advanced machine learning applications in conjunction with other colleagues across the bank.
• Collaborate with business, technology, and risk partners to ensure risk considerations are embedded throughout the AI lifecycle—from ideation and development to deployment and monitoring.
• Support the development and embedding of AI risk controls, including governance, documentation standards, monitoring, issue management, and control testing approaches.
• Be advisory to CIB, Group AI and Risk areas to help improve controls and create efficiencies around AI impacting risk areas – including Model, Data, Cyber , Technology, Incident response, Regulatory compliance
• Represent CIB Responsible AI on several cross line of business working groups looking to drive initiatives around better risk management in this space
• Provide effective challenges on risk decisions, including control design, residual risk acceptance, and remediation plans.
• Track and communicate AI risk posture, key issues, and emerging risks through concise reporting and stakeholder updates.
• Contribute to risk education and awareness by coaching stakeholders on responsible AI practices and risk expectations.
• Maintain awareness of external developments in AI, FinTech, and regulatory expectations, translating them into practical guidance for the business.

To Be Successful You Will

• Significant experience in AI/ML, technology/information risk or cyber risk with exposure to AI/advanced analytics or emerging technologies.
• Strong understanding of AI and machine learning concept, techniques and delivery practices, with hands on exposure to Generative AI use cases
• Demonstrated experience in multiple risk stripes - model risk, data risk, cyber risk, technology risk, and operational resilience.
• Ability to critically assess complex AI solutions and articulate risk exposures and mitigations to technical and non-technical audiences.
• Demonstrable risk management mindset: ability to identify material risks, assess control effectiveness, and drive proportionate mitigations.
• Proven ability to engage and influence senior stakeholders, including confident communication, constructive challenge, and strong relationship management.
• Strong programme/project management capability: planning, prioritisation, dependency management, and delivery discipline across multiple workstreams.
• Excellent written skills: ability to produce clear, concise risk assessments, governance papers, and executive updates.
• Experience working in global, matrixed organisations with diverse teams and time zones.
• Bachelor’s degree (or equivalent experience) in a relevant discipline (e.g., finance, risk, technology, data, engineering, mathematics).

What additional skills will be good to have?

• Experience advising on responsible AI topics such as fairness, explainability, transparency, and model monitoring at scale.
• Familiarity with AI governance and risk frameworks (e.g., NIST AI Risk Management Framework, ISO/IEC 23894) and practical application in financial services.
• Experience with third-party/outsourcing risk as it relates to AI platforms, data providers, and FinTech partnerships.
• Certifications (helpful, not required):
• Technology/security (e.g., CISSP, CISM)
• Data/AI (e.g., cloud or data certifications; responsible AI or AI governance credentials)

Hsbc.com/careers You’ll achieve more at HSBC HS…