AI Governance & Data Risk Principal

Huntington Bancshares Inc•Cleveland, OH

54d•Hybrid

About The Position

The AI and Data Risk Principal is a member of Huntington's Independent (2nd Line) IT Risk function. This 2nd line of defense role encompasses creation, improvement, and execution of Technology and Operational risk governance across the Bank, including partnership and oversight of front-line business and risk units, in alignment with the Enterprise Risk Framework. Primary responsibilities include the following with a focus on specific domain oversight:

Requirements

Bachelor's degree or equivalent level of work experience
Five or more years relevant experience in a technology role, directly supporting technology processes or assets (applications/systems/etc.)

Nice To Haves

Previous experience serving in a Governance/Risk/Compliance/Audit function, ideally in a leadership role and with a large firm
Experience and understanding of the data lifecycle within a financial services firm
Experience deploying programs across data and AI
Effective advisory and collaboration skills, and ability to drive consensus
Advanced understanding of the IT process' (developing, delivering, supporting technology) and associated grasp of Technology Risks and Controls
Logical and organized problem solver
Effective written and verbal communication skills. Resource needs to be effective at understanding the technical side but also able to document their assessment (or other analysis items as needed).
Critical/strategic thinker (able to look at something strategically and think risk, efficiency, cost, etc. - big picture 'so what' analysis and can execute what's needed to help support the effort)
Process oriented mindset and able to tell a story leveraging data
Time management/organized/ability to prioritize
Managerial courage and ability to effectively interact with various levels of leadership
Understanding of IT risk and control frameworks such as COBIT, etc.
In-depth knowledge of risk management processes and principles, including experience assessing risks, analyzing testing results and developing remediation plans
Strong preference for recognized industry certification such as ISACA CRISC/CISA/CISM, ISC2 CISSP/SSCP, or similar. Where these certifications are not possessed at the time of hire, the candidate will be expected to obtain certification within a 12-month period
Experience working in the Financial Services industry
KPI/KRI metrics and reporting experience
Additional specialized qualifications may be required based on the specific position
Performs other duties as assigned.

Responsibilities

Manage and deploy AI Governance program across the enterprise
Manage AI policy adherence and governance
Design, own and manage AI risk assessments to ensure AI risks and controls are identified
Work cross-functionally with other risk teams to ensure a comprehensive AI risk governance program
Management of processes to ensure credible challenge, oversight, and validation of AI and Data risk findings/action plans/risk acceptances and 1st line risk and control assessments across the Bank
Management and Oversight of assigned L2 risk(s) from our Risk Registry in alignment with our risk appetite
Participation and Challenge within the IT Policies and Standards framework and processes to ensure output is aligned with risk appetite. This includes metrics, controls, process maps and other wholesale material for a healthy standard.
Deliver periodic IT risk updates at governance meetings and active participation in the Risk Committee and associated sub-forums
Deliver quarterly independent IT Risk Assessments and targeted assessments in to form and support the Bank's IT risk profile
Providing Risk Management leadership across the Bank's Information Technology, Data and Operational risks
Assisting with determining the AI Risk Program's strategy and areas of focus
Participation in our mentorship programs in alignment with our focus on colleague growth