Senior Manager, AI Governance & Security Lead

A. Overall Purpose Of The Job (Brief description of the primary purpose of this position)

We are seeking an experienced AI Governance & Security Lead to help drive our organization's AI transformation and support our clients in the financial services sector. This role will be responsible for establishing and embedding AI governance, risk management, security, compliance, and responsible AI practices across internal and client-facing AI initiatives.

The successful candidate will serve as a trusted advisor to business leaders, technology teams, risk functions, and clients, ensuring that AI solutions are deployed securely, responsibly, ethically, and in compliance with applicable regulatory requirements.

This role combines expertise in AI governance, cybersecurity, technology risk, regulatory compliance, and responsible AI, with a strong focus on financial industry expectations and emerging global AI regulations.

B. Key Responsibilities (Critical responsibilities and skills of this position, listed in order of importance)

AI Governance Strategy & Frameworks

• Develop and maintain enterprise-wide AI governance frameworks, standards, policies, procedures, and operating models.
• Establish governance structures, accountability models, and oversight processes for AI systems and AI-enabled business processes.
• Conduct gap assessments, maturity reviews and present findings and recommendations to leadership
• Design and implement AI lifecycle governance covering design, development, testing, deployment, monitoring, and retirement.
• Create governance requirements for Generative AI, Agentic AI, Machine Learning models, and third-party AI solutions.
• Establish AI inventories, risk registers, approval workflows, control frameworks, and reporting mechanisms.
• Drive adoption of Responsible AI principles including fairness, transparency, explainability, accountability, privacy, and human oversight.
• Develop training materials and awareness programs to promote responsible AI practices across the organization.

AI Risk Management

• Lead AI risk assessments for internal initiatives and client engagements.
• Identify and assess risks relating to:
• Model bias and fairness
• Hallucinations and output reliability
• Explainability and transparency
• Data privacy and confidentiality
• Intellectual property risks
• Third-party AI dependencies
• Model drift and performance degradation
• AI operational and reputational risks
• Evaluate contractual, security, privacy, regulatory, and operational risks associated with AI solutions.
• Define AI risk mitigation controls and remediation plans.
• Develop risk rating methodologies and AI assurance processes.

AI Security & Cybersecurity

• Define security requirements and controls for AI solutions and platforms.
• Conduct AI threat modelling and security assessments.
• Assess and mitigate AI-specific threats including:
• Prompt injection
• Data leakage
• Model poisoning
• Agent hijacking
• Unauthorized access
• Privilege escalation
• Adversarial attacks
• Sensitive information exposure
• Establish secure-by-design requirements for AI applications and agentic AI systems.
• Collaborate with cybersecurity teams to integrate AI controls into security architecture, identity management, vulnerability management, monitoring, and incident response programs.
• Assess AI vendors, models, service providers, and cloud platforms.
• Develop AI vendor due diligence and ongoing monitoring processes.
• Establish controls for use of external LLMs and AI services.

Regulatory Compliance

• Provide expert guidance on AI governance and security requirements relevant to regulated financial institutions.
• Interpret and operationalize regulatory and industry frameworks, including:
• Monetary Authority of Singapore (MAS) requirements
• MAS FEAT Principles
• MAS Technology Risk Management (TRM)
• NIST AI Risk Management Framework
• ISO/IEC 42001
• ISO 27001
• EU AI Act
• Data protection and privacy regulations
• Monitor emerging AI regulations, supervisory guidance, and industry best practices.
• Support client audits, regulatory reviews, assessments, and remediation programs.
• Develop governance roadmaps and maturity assessments for clients.

C. Job Profile

Required Competencies & Work Experience (Critical behaviors necessary to successfully perform the job)

• Bachelor's degree in Computer Science, Information Security, Engineering, Data Science, Law, Risk Management, or related discipline.
• 8-12+ years of experience in one or more of the following:
• AI Governance
• Technology Risk
• Cybersecurity
• IT Governance
• Financial Services Risk Management
• Regulatory Compliance
• Data Governance
• AI Security
• Demonstrated experience designing and implementing governance frameworks in regulated environments.
• Strong understanding of AI and Generative AI technologies, including Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), machine learning, and agentic AI systems.
• Experience conducting technology, cybersecurity, or AI risk assessments.
• Strong stakeholder management and executive communication skills.
• Experience working with financial institutions and regulated industries.

Preferred

• Experience designing AI governance operating models.
• Experience implementing Responsible AI frameworks.
• Hands-on knowledge of cloud security controls (Azure, AWS, GCP).
• Experience supporting regulatory inspections, audits, and assurance reviews.
• Familiarity with AI security testing and AI red teaming.
• Experience with AI model governance and model risk management.
• Consulting or professional services experience.

Professional Certifications (Preferred)

• CISSP
• CISM
• CRISC
• CCSP
• ISO 27001 Lead Implementer or Lead Auditor
• Certified Information Privacy Professional (CIPP)
• Certified in AI Governance (AIGP)
• NIST AI RMF related certifications
• Microsoft Certified: Cybersecurity Architect Expert
• AWS Security Specialty