Sr. AI Risk Analyst

Job Description:

We are seeking a highly experienced Risk Analyst to perform third-party AI risk assessment as part of enterprise imitative to build a centralized Enterprise AI Risk Management System ("System") to meet AI regulatory and internal governance requirements. The System will include, but not limited to, AI inventory management, AI Risk Management throughout the lifecycle including initiation, development, validation, deployment, monitoring, change management, retirement. The third-party AI inventory and risk management are integral part of the Enterprise AI Risk Management system. As an AI Risk Analyst, you are responsible for following and understanding evolving AI regulatory requirements (e.g., EU AI Act) and collaborating with various SMEs at client site to ensure their third-party AI uses globally are properly recorded and the associated AI risks are adequately assessed and mitigated. You will lead and drive the project by closely working with client's third party risk management team and relevant teams from third parties. The System will be delivered in a phased approach including, but not limited to,

• architecture design
• global AI inventory creation and maintenance including existing AI/model inventory conversion
• AI/model governance functions (e.g., model submission, validation and approval, AI use case assessment and approval including but not limited to data and privacy, security, intellectual property)
• tracking and reporting functions

Responsibilities:

Focusing on third-party AI risk assessment and integration to the Enterprise AI Risk Management system, this role will

• collaborate with third parties and client's cross-functional teams to collect and document AI use cases that would enable adequate risk assessment to meet regulatory requirements (e.g., identify and report prohibited and high-risk AI use cases meeting regulatory risk level definitions)
• conduct thorough gap analysis and propose optimal scalable solution by effectively leveraging existing resources (including available platforms, systems, SMEs) and minimize redundant work
• Initiate and drive necessary meetings with internal and external stakeholders to ensure proper communication and alignment on the functions (including, but not limited to, GUI design, logic flow of the governance requirements such as review and approval process) of the System and propose optimal solutions
• Draft the third-party AI governance guideline or procedure including how to address AI inquiries from regulators, customers, and auditors
• test during and post system development to ensure the System functions are integrated well and work as intended, document all tests and outcomes, critical decisions made by stakeholders and rationale
• ensure any bugs or potential design/scalability issues identified during development and testing phases communicated timely to all relevant stakeholders and documented, and assist engineers and product managers to resolve timely
• Manage the project proactively and play pivotal role in timely delivery

Requirements:

• An advanced degree (bachelor or master) in an equivalent field such as business, management, management of information system
• Solid understanding machine learning features/data, and AI/model lifecycle risk management
• Third party AI/model risk management experience and Generative AI experience is highly desired
• Excellent technical document writing skills to draft and maintain relevant documents including but not limited to BRD, meeting minutes, presentations, emails, project progress
• Outstanding communication skills to be able to effectively present business goals, issues/ /challenges, gaps/findings, and solutions to both technical and non-technical stakeholders
• Operate with velocity and an ownership mindset and proactively deliver great end-to-end results both independently and in a team environment
• A passionate fast learner with ability to research, learn, and apply advanced technical and non-technic skills related to AI/model
• Ability to build strong relationship with both internal and external stakeholders and ensure effective engagement