2LOD Director of AI Risk Oversight & Governance (US)

TD • Boston, MA

5d • $148,720 - $240,240

About The Position

The Director leads and establishes the framework for responsible, secure, compliant, and effective use of artificial intelligence. The role provides executive-level oversight of AI strategy, risk management, governance, and operational controls while enabling segment teams to adopt AI responsibly and at scale. The Director partners with senior leadership and stakeholders across Segment Risk, Specialty Risk, Technology, Legal, Compliance, Cybersecurity, Privacy, Risk, Data, Vendor, and Business teams to align AI initiatives with organizational objectives, regulatory requirements, ethical standards, and risk tolerance.

The role maintains AI policy and governance documentation, facilitates the US AI Governance Risk Committee with its Chair, establishes an AI control inventory, and monitors higher-risk AI applications, models, and use cases. It tracks emerging AI legislation, regulations, standards, and industry expectations, and monitors operating metrics, issues, remediation progress, and key risk indicators, escalating through established channels when necessary. The Director develops second-line-of-defense AI use cases and develops or obtains training and awareness programs for employees, executives, and business users. The role also supports regulatory exams, internal audits, external assessments, and executive reporting relating to AI.

More broadly, this Operational Risk Manager II role provides risk analysis, reporting, and support to business partners, serving as a specialist and advisor on risk matters. It may lead enterprise risk initiatives, provide strategic operational risk leadership, manage or guide professionals, build internal and external partnerships, and identify technological and process improvements that strengthen controls and reduce operational risk. The position works across business segments and jurisdictions, engages with regulators, supports risk programs and governance processes, advises senior and executive management, and contributes to enterprise risk strategy and reporting.

Requirements

• Bachelor's degree or progressive work experience, in addition to the experience specified.
• 10 or more years of related experience.
• Expert enterprise- or group-level knowledge of operational risk management, including enterprise, business, regulatory, and industry issues.
• Previous management experience.
• Ability to coach, counsel, train, and lead staff.
• Strong attention to detail and ability to recognize and respond to discrepancies.
• Strong interpersonal skills, including conflict management and negotiation.
• Proven project management skills for multiple large projects.
• Strategic planning and process management experience.
• Proven experience establishing and implementing effective strategies and short- and long-range plans that achieve bottom-line results.
• In-depth knowledge of financial services processes and workflows.
• Strong relationship-building skills and ability to develop and maintain business contacts at all levels of management.
• Excellent written and verbal communication skills, including developing business communications that call for specific action.
• Effective presentation skills, including presenting to regulators, executive management, and the Board of Directors.
• Ability to influence decisions and actions without express authority.
• Strong ability to analyze information and business situations and collaborate effectively with business partners on corporate direction.
• Travel may be required.

Nice To Haves

• 8 or more years of experience in technology, AI/ML, risk management, governance, compliance, cybersecurity, privacy, data, audit, or a related discipline.
• Strong understanding of AI/ML technologies, generative AI, Model Risk, data governance, and AI lifecycle management.
• 5 or more years of experience leading company-wide programs or teams.
• Strong judgment and strategic thinking, with demonstrated experience developing governance, risk, compliance, or oversight frameworks.
• Experience leading responsible AI, AI governance, model risk, or enterprise AI oversight programs.
• Familiarity with major AI governance and risk management frameworks, including NIST AI RMF, model risk management standards, and emerging AI regulations.
• Experience working with executive committees, boards, regulators, auditors, or other external stakeholders.
• Professional certifications in risk, compliance, audit, cybersecurity, privacy, or AI governance.

Responsibilities

• Lead and establish the framework for responsible, secure, compliant, and effective AI use.
• Provide executive-level oversight of AI strategy, risk management, governance, and operational controls while enabling responsible AI adoption at scale.
• Partner with senior leaders and stakeholders across risk, technology, legal, compliance, cybersecurity, privacy, data, vendors, and business teams to align AI initiatives with organizational objectives, regulations, ethical standards, and risk tolerance.
• Maintain AI policy and governance documentation.
• Facilitate the US AI Governance Risk Committee with the Chair and establish an AI control inventory.
• Monitor higher-risk AI applications, models, and use cases, as well as emerging AI legislation, regulations, standards, and industry expectations.
• Measure and monitor success and operating metrics, issues, remediation progress, and key risk indicators; escalate when necessary through established channels.
• Develop second-line-of-defense AI use cases and develop or obtain AI training and awareness programs for employees, executives, and business users.
• Support regulatory examinations, internal audits, external assessments, and executive reporting relating to AI.
• Provide risk analysis, reporting, and support to business partners and expert guidance on risk matters.
• Lead or manage enterprise-wide or cross-business operational risk programs and initiatives.
• Provide vision and leadership for the operational risk management program; develop and coach staff when applicable.
• Build and maintain strong relationships with internal and external partners, business unit management, regulators, and senior leaders.
• Identify and recommend technological and process improvements to enhance internal controls, expense management, quality assurance, and operational risk reduction.
• Serve as a primary regulatory interface on risk issues for a key business segment and assess and provide direction on existing and new regulations.
• Compile and analyze reports on business trends, risks, losses, and issues, and recommend management actions to minimize exposures.
• Develop or implement standards, policies, and processes to identify, report, and mitigate operational risk exposures, including regulatory responses.
• Analyze potential risks and ensure key risks are escalated to appropriate areas or business leaders.
• Establish ongoing operational risk analysis and reporting, review findings and action plans with business leaders, and support mitigation of key issues.
• Coordinate or guide risk disciplines and programs, including RCSAs, business continuity management, outsourcing and vendor management, regulatory compliance, and affiliate transaction governance.
• Support enterprise risk escalation, review and approval processes, data management, policies, and risk assessment processes.
• Direct development and monitoring of key risk indicators and facilitate communication and resolution of cross-business risk issues.
• Provide insight and guidance to business unit senior and executive management on major risk drivers and key risk indicators.
• Represent business or functional areas on risk committees and working groups, and prepare or contribute to board and executive management reporting.
• Educate business leaders and broader groups on key risk issues, drivers, and mitigants.
• Contribute to executive-level tools, risk capital frameworks, enterprise risk strategy, and operational risk management requirements.
• Support risk-management projects, financial planning and analysis, regulatory responses, Board Risk Committee presentations, and other defined requirements.
• Lead or contribute to financial results and budgeting activities.

Benefits

• Base salary and variable compensation/incentive awards, including potential eligibility for cash and/or equity incentive awards through an incentive plan.
• Health and well-being benefits.
• Savings and retirement programs.
• Paid time off, including Vacation PTO, Flex PTO, and Holiday PTO.
• Banking benefits and discounts.
• Career development, training, mentoring programs, and reward and recognition.

What This Job Offers

• Job Type: Full-time
• Career Level: Director