Director, Information and AI Governance

Morgan Stanley•New York, NY

3d•Hybrid

About The Position

Advise on applicable governance processes, controls, policies, and procedures, including their design to meet regulatory requirements; review, draft and provide support for new and existing policies and procedures. Support Firm's responses to relevant exams, regulatory inquiries, and enforcement actions. Help develop and conduct regulatory training for employees, including instruction on regulatory changes. Keep abreast of industry trends and emerging risks; monitor regulatory focus areas and keep internal stakeholders informed. Help define and implement the Firm's adoption of our AI and Gen AI strategies. Help establish and implement the governance framework for the onboarding, testing and ongoing monitoring of AI and Gen AI models. Help establish a risk based framework for the review and signoff of Gen AI uses cases by the Control Functions in AI Governance. Coordinate the review process of AIML use cases by the relevant control functions. Perform periodic monitoring checks to ensure 1L and 2L adherence to governance policies and procedures. Communicate to senior management relevant AI governance updates and developments in a timely and actionable manner. Telecommuting permitted up to two (2) days per week. -Requires a Master's in Enterprise Risk Management, Finance, or a closely related field of study. -Requires two (2) years of experience in the position offered or two (2) years as a Director, Risk/Policy Management, or a closely related occupation. Providing oversight of regulatory mandates around Compliance and Risk governance, including NIST (National Institute of Standards and Technology) frameworks and Regulator rules and notifications; Performing assessment of Risks and Control environment; Developing Key Performance Indicators and metrics; Performing advanced data analysis to create senior governance committee reports; Providing advice and guidance to the business and control functions on governance and oversight structure; Creating reporting guidance and cadence to satisfy business and control functions' responsibilities around timely communication and escalation of issues; Performing periodic monitoring checks to ensure business and control functions are adhering to governance policies and procedures; Defining roles and responsibilities for various Lines of Defense to prevent, manage, and mitigate risks; Driving senior management reporting and materials; and Collaborating with stakeholders and partner functions to execute risk management principles, tolerance, and mandate. We do it in a way that's differentiated - and we've done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren't just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There's also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees. It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law.

Requirements

Requires a Master's in Enterprise Risk Management, Finance, or a closely related field of study
Requires two (2) years of experience in the position offered or two (2) years as a Director, Risk/Policy Management, or a closely related occupation

Responsibilities

Advise on applicable governance processes, controls, policies, and procedures, including their design to meet regulatory requirements
Review, draft and provide support for new and existing policies and procedures
Support Firm's responses to relevant exams, regulatory inquiries, and enforcement actions
Help develop and conduct regulatory training for employees, including instruction on regulatory changes
Keep abreast of industry trends and emerging risks; monitor regulatory focus areas and keep internal stakeholders informed
Help define and implement the Firm's adoption of our AI and Gen AI strategies
Help establish and implement the governance framework for the onboarding, testing and ongoing monitoring of AI and Gen AI models
Help establish a risk based framework for the review and signoff of Gen AI uses cases by the Control Functions in AI Governance
Coordinate the review process of AIML use cases by the relevant control functions
Perform periodic monitoring checks to ensure 1L and 2L adherence to governance policies and procedures
Communicate to senior management relevant AI governance updates and developments in a timely and actionable manner
Providing oversight of regulatory mandates around Compliance and Risk governance, including NIST (National Institute of Standards and Technology) frameworks and Regulator rules and notifications
Performing assessment of Risks and Control environment
Developing Key Performance Indicators and metrics
Performing advanced data analysis to create senior governance committee reports
Providing advice and guidance to the business and control functions on governance and oversight structure
Creating reporting guidance and cadence to satisfy business and control functions' responsibilities around timely communication and escalation of issues
Performing periodic monitoring checks to ensure business and control functions are adhering to governance policies and procedures
Defining roles and responsibilities for various Lines of Defense to prevent, manage, and mitigate risks
Driving senior management reporting and materials
Collaborating with stakeholders and partner functions to execute risk management principles, tolerance, and mandate