AI Risk Management SME

Role : AI Risk Management SME

Experience : 8 to 15 years

Location : Pan India

Keywords Enterprise AI GRC, AI Governance, Responsible AI, Trustworthy AI, NIST AI RMF, ISO 42001, Control Testing, Policy, Audit Readiness, Model Risk

Desired Competencies (Technical/Behavioral Competency)

Must-Have

1. 10–12 years of experience in risk management, technology risk, model risk management, information security, governance, compliance or AI governance.
2. Hands-on experience in AI Risk Management and/or Responsible AI Governance within large enterprises or consulting environments.
3. Strong expertise in NIST AI RMF, ISO/IEC 42001, AI governance controls and lifecycle risk management.
4. Experience assessing and governing traditional ML, generative AI and enterprise AI/ML use cases across design, development, deployment and monitoring.
5. Strong senior stakeholder management, policy development, communication, documentation, control design and audit-readiness skills.

Good-to-Have

1. Experience in regulated industries such as BFSI, Healthcare, Telecom, Retail or Technology.
2. Familiarity with ISO 27001, NIST CSF, Model Risk Management, Responsible AI principles and data privacy regulations.
3. Exposure to internal audit, RCSA, GRC tooling, third-party/vendor AI risk, GenAI governance, LLM risk assessment and AI system assurance.

SN

Role descriptions / Expectations from the Role

1

Lead development and operationalization of enterprise AI risk management frameworks aligned to NIST AI RMF and ISO/IEC 42001.

2

Establish and maintain policies, standards, procedures and controls for responsible AI, trustworthy AI and lifecycle governance.

3

Perform and lead AI risk assessments covering fairness, explainability, privacy, security, robustness, reliability and regulatory/reputational risk.

4

Design AI risk taxonomy, control libraries, assessment templates, governance workflows, control testing approach and evidence requirements.

5

Establish KPIs/KRIs, executive dashboards, reporting packs, compliance reviews, maturity improvement plans and awareness/training programs.