Senior Principal, Cyber Regulatory Intelligence & AI Governance

Bayer•Washington, DC

3d•Onsite

About The Position

The Senior Principal of Cyber Regulatory Intelligence & AI Governance will lead Bayer's enterprise capability for translating evolving cyber regulatory requirements into actionable governance, policy, control, and AI assurance frameworks. This leader will establish a future-state "cyber agentic governance" model that continuously monitors regulatory change, assesses impact, and orchestrates compliance activities across Cyber Security, Digital, Data, and AI domains. This role will be based in Washington, DC and remote working arrangements will not be accommodated.

Requirements

12+ years of relevant experience in cyber security, technology risk, governance, compliance, and/or regulatory affairs
Experience leading global governance programs
Knowledge of NIST, ISO 27001, DORA, NIS2, AI Act, SOX, GDPR, and related regulations
Experience briefing executive leadership

Nice To Haves

Experience implementing AI governance programs
Background in pharmaceutical, life sciences, or highly regulated industries
Advanced degree in technology, law, risk management, or cybersecurity

Responsibilities

Monitor and analyze global cyber, AI, privacy, digital resilience, and technology regulations.
Develop a continuous cyber regulatory intelligence capability using automation and AI.
Translate requirements into actionable cyber policies, standards, and control frameworks.
Advise executives on emerging cyber regulatory risks and strategic implications.
Establish cyber governance frameworks for AI systems and agentic technologies.
Define guardrails for trustworthy, explainable, and responsible AI.
Partner with legal, risk, compliance, and technology leaders to operationalize cyber governance.
Oversee cyber AI assurance and compliance reporting.
Drive enterprise cyber compliance readiness for evolving cyber regulations.
Coordinate evidence, control mapping, and compliance automation.
Lead engagement with internal audit and external regulators.
Build and lead a high-performing cyber regulatory intelligence organization.
Drive executive reporting and strategic planning.
Influence enterprise-wide decision making.