Director AI Governance

Exceed the expectations of our residential mortgage borrowers & business partners through superior service, simple processes, and effective communications.

We deliver on this mission by empowering our employees by encouraging and recognizing superior performance and innovative solutions, by promoting teamwork and divisional cooperation.
 

POSITION SUMMARY

The Director AI Governance is a critical role responsible for establishing, maturing, and monitoring the organization’s AI governance, compliance, and risk management capabilities. This position directly supports the company's strategic use of artificial intelligence while ensuring the responsible, compliant, and secure deployment across all business units.

This position requires deep expertise in AI systems, data governance, security and privacy controls, regulatory requirements, and emerging risks. The Director AI Governance collaborates with security, technology, legal, compliance, and business stakeholders to develop standards, assess and monitor risks, maintain governance controls, and support AI initiatives throughout their lifecycle.

Director AI Governance advances the maturity of the AI governance program by ensuring AI solutions are trustworthy, transparent, resilient, and aligned with enterprise risk practices and corporate policy. This role also serves as a key point of coordination during internal and external assessments and plays an essential part in developing metrics, policies, and program oversight to maintain compliance with evolving AI regulations and industry best practices.

DESCRIPTION

Essential Functions, Duties, and Responsibilities

• Maintain and enhance AI governance structures, policies, and controls to ensure the organization consistently implements responsible AI practices.
• Document, recommend, and enforce AI governance improvements that balance business innovation with risk, supporting the goal of fostering trustworthy and accountable AI systems.
• Facilitate cross‑functional collaboration to ensure AI governance responsibilities, roles, and reporting structures remain clear and effective.
• Conduct enterprise‑wide AI risk analyses to identify intended AI use cases, data dependencies, system context, and potential impacts on security, privacy, fairness, and organizational objectives.
• Maintain strong oversight of third‑party AI vendors and model providers to identify risks related to training data provenance, model transparency, and system integrity.
• Develop and maintain qualitative and quantitative metrics to assess AI system performance, drift, robustness, and risk indicators.
• Monitor regulatory, industry, and best‑practice developments and adjust governance measures accordingly.
• Integrate AI governance processes into model development lifecycles, procurement, change management, and incident response.
• Participate in AI‑related incidents or model failures by documenting occurrences, assessing impact, determining mitigations, and supporting resolution in alignment with AI risk response practices.
• Ensure documentation remains up‑to‑date, including model cards, data lineage, training approaches, and system configuration details.
• Partner with Legal, Compliance, and Security to ensure AI controls support broader enterprise obligations across privacy, cybersecurity, resiliency, and regulatory frameworks.
• Liaise with internal and external auditors evaluating AI governance controls and documentation.
• Communicate AI‑related risks, decisions, and governance expectations to technical and non‑technical stakeholders.
• Ability to effectively and accurately convey information to others.
• Perform additional duties as assigned by management.

Qualifications and Education Requirements

• Bachelor’s degree in computer science, information systems, cybersecurity, data science, or related field—or equivalent experience.
• 8+ years in cybersecurity, risk management, data governance, AI/ML governance, or related fields.
• Demonstrable experience working with AI systems, ML lifecycle management, and governance frameworks (NIST AI RMF strongly preferred).
• Knowledge of regulatory environments such as GLBA, SOX, NYDFS, and privacy requirements, with exposure to emerging AI regulations.
• Experience with GRC platforms and AI governance tools (e.g., model registries, monitoring platforms).
• Preferred exposure to cloud environments (AWS, Azure).
• Relevant certifications such as CISSP, CISA, CRISC, CGEIT, GRCP, or responsible AI certifications are a plus.

Skills, Abilities, and Knowledge

• Strong understanding of AI/ML risk concepts including bias, robustness, explainability, transparency, and resilience.
• Ability to relate