AI Governance Program Manager

COCC•Rocky Hill, CT

2d•Hybrid

About The Position

COCC is seeking an experienced AI Governance Program Manager to lead and mature our enterprise AI governance, risk, and compliance program. This role is ideal for a seasoned GRC professional who understands AI and emerging technologies and can bring structure, oversight, and clarity to how AI is deployed across a regulated environment. You will play a critical role in ensuring AI capabilities are used responsibly, securely, and in alignment with regulatory expectations and organizational risk appetite. You will work closely with security, legal, technology, and business teams to shape and evolve our enterprise AI governance program.

Requirements

Seven or more years of experience in information security, technology risk, IT audit, or GRC
Experience working in regulated industries such as financial services, fintech, healthcare, insurance, or critical infrastructure
Strong understanding of AI and machine learning technologies including generative AI and large language models
Experience developing governance frameworks, policies, standards, and risk assessment methodologies
Familiarity with NIST AI RMF, NIST Cybersecurity Framework, FFIEC guidance, GLBA, SOC examinations, and privacy regulations
Strong analytical, communication, and program management skills
Ability to translate technical AI concepts into business risk language

Nice To Haves

Masters degree in Cybersecurity, Information Technology, Risk Management, Data Science, or a related field

Responsibilities

Develop, implement, and maintain the enterprise AI governance framework, policies, standards, and procedures
Establish AI risk management processes aligned with regulatory expectations and industry frameworks
Define AI governance roles, responsibilities, accountability structures, and escalation processes
Establish AI risk tiering and classification methodologies
Conduct and oversee AI risk assessments for internally developed AI, third party platforms, vendors, and customer facing AI solutions
Evaluate AI risks related to security, data exposure, bias, explainability, model drift, and regulatory compliance
Partner with security and architecture teams to define compensating controls and risk treatment plans
Maintain the enterprise AI inventory and AI risk register
Monitor evolving AI regulations, supervisory guidance, and industry expectations
Support internal audits, regulatory examinations, and external assessments related to AI governance
Develop governance reporting, metrics, and artifacts for regulators and executive leadership
Coordinate AI related policy exceptions, approvals, and risk acceptances
Partner with vendor management and procurement teams to assess AI risks in third party relationships
Collaborate with information security teams to support secure AI deployment and data protection practices
Prepare and present AI governance and risk posture updates to senior leadership and board committees
Drive enterprise awareness and training initiatives related to responsible AI use