Principal Operational Risk Oversight - AI and Generative AI Risk Management

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

What You’ll Do 

• Maintain, enhance, socialize, and execute on the Artificial Intelligence Risk Management Framework across the enterprise. 

• Report and communicate the status of AI risk at the Company to various levels of senior leadership and committees. 

• Develop and operationalize ongoing monitoring program for identified Generative AI use cases, risks, and controls. 

• This role is responsible for operational risk oversight activities specific to a respective business line or corporate function. This includes advising, assessing, and effectively challenging all operational risks and mitigates for the specific business and their impact on both risk appetite and the goals and objectives of the business. 

• This individual contributor will oversee the operational risk activities across the business in partnership with business line leaders, business line control leaders, and other second and third line leaders including compliance risk and internal audit. This role will work with other corporate and non-financial risk leaders and their teams to ensure the effective implementation of enterprise and operational risk programs by the business and driving the effective challenge process of these programs. 

• Critical to success will be providing an effective second line of defense including monitoring, testing, and operational risk assessments of the business to ensure effective risk management practices and strong control environment for the business. This role will also be expected to engage with, influence, and lead business partners at all levels in the organization, escalate risks when necessary, actively participate in governance and management committees, and may effectively engage with regulators along with management. 

• This role may participate on cross-team Non-Financial Risk department special projects and ad hoc analysis/reporting to senior management on operational risks. In executing these functions, the Principal is expected to collaborate closely with other colleagues across Operational Risk Oversight, Non-Financial Risk Management, Corporate Risk Management, and other lines of business and corporate functions. 

• Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management. 

 
How You’ll Do It 

• Collaborating with stakeholders to mitigate the risks of using AI at the Company. 

• Maintaining and enhancing relevant procedures, job-aids, etc., to improve process effectiveness and efficiency. 

• Conducting risk assessments for Generative AI use cases. 

• Executes the risk-based approach to independent risk assessments and oversight for the business. 

• Ensuring effective oversight of the business and leverages the results from NFRM Testing COE to drive an effective risk and control environment for the business. 

• Executing operational risk advisory and effective challenge for programs across the Non-Financial Risk Programs. 

• Participating in and engage with business leaders in governance to help drive a culture of effective risk management. 

• Updating status reports of program initiatives, activities, and non-financial risks to management and committees and escalate concerns and successes. 

 
Qualifications You’ll Need 
The Basics: 

• Bachelor’s degree in business administration and management or related field.  

• 6+ years of experience in law, risk, or operations.  

• 3+ years of experience in in first- or second-line risk, control, or compliance role in a highly regulated financial institution subject to Heightened Standards.  

• In Lieu of Education, 10+ years of experience in risk management, in a highly regulated financial/depository environment with specific focus on operational risk management, internal audit, or related.  

Physi