Leads the enterprise control system and cross-functional governance operating model for artificial intelligence across use cases and internal models. The role maintains the AI inventory and risk-tiering model, directs lifecycle assessment and monitoring, translates healthcare, audit, NIST, ISO, accreditation, and regulatory expectations into operating controls, and produces timely, auditable decisions and readiness evidence.
$147,867.20 - $275,038.40
- Establish and continuously improve the enterprise responsible-AI framework, policies, standards, risk taxonomy, decision rights, lifecycle controls, and assurance model.
- Maintain an authoritative inventory of AI systems and use cases and define proportionate risk tiers, review paths, evidence requirements, monitoring obligations, material-change triggers, and retirement criteria.
- Lead risk assessments for proposed and operating AI use cases and internal models and document residual risk, required controls, owners, conditions, exceptions, monitoring, and decision rationale.
- Exercise delegated authority to condition, pause, or reject AI use when documented evidence indicates unacceptable risk or required controls are not operating effectively.
- Define monitoring, periodic reassessment, and material-change requirements for performance, safety, fairness, privacy, security, human oversight, explainability, drift, incidents, and control effectiveness.
- Bachelor’s Degree
- Master’s Degree
- Nice to have: Master’s Degree in Healthcare Administration, Law, Compliance, Risk Management, or Information Systems
- Nice to have: Certified Information Systems Auditor (CISA)
- Nice to have: Certified in Risk and Information Systems Control (CRISC)
Healthcare experience (clinical and operational workflows)Enterprise governance, risk, compliance, assurance, audit, privacy, security, clinical safetyPredictive, generative, and agentic AI lifecycles knowledgeNIST, ISO, healthcare regulatory, accreditation, audit, privacy, security, and enterprise-control frameworksStrong independent judgment and ability to distinguish risk ownership, control ownership, governance disposition, remediation accountability, and Internal Audit independenceAbility to design and automate risk tiers, intake and assessment workflows, control requirements, monitoring obligations, exception mechanisms, decision records, service measures, and audit-ready evidence packages - Medical Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Disability Insurance