Advisor-IT Risk and Compliance

While this is a remote position, the successful candidate must reside within 50 miles of a FedEx Freight location within the continental US. **POSITION OVERVIEW** **:** Responsible for spearheading the enterprise AI governance and security program. Position sits within the InfoSec Governance, Risk, and Compliance (GRC) organization; and for developing and implementing the AI cybersecurity governance frameworks. **ESSENTIAL JOB DUTIES/RESPONSIBILITIES:** - Design, implement, and operationalize enterprise-wide InfoSec AI cybersecurity governance framework and risk reviews in close partnership with other InfoSec SMEs, Platform Owners and AppDev. - Align corporate AI security practices and frameworks with the NIST AI Risk Management Framework (AI RMF) and applicable legal, regulatory, and cybersecurity standards. - Develop, deploy, and manage an automated review system for enterprise AI security compliance, including the handling of protocols for unapproved AI network activity. - Partner cross-functionally with Application Security, Data Security, Data Governance, and Application Development teams to review solutions, establish AI tool parameters, and clearly convey security compliance requirements. - Stay abreast of rapid industry advancements in generative and agentic AI to translate emerging threats into actionable GRC processes. - Evaluate risk profiles of third-party enterprise AI assets and software platforms to align with centralized corporate inventory of approved vs. unapproved models and integrations. - Prepare materials and present AI risk assessments, mitigation strategies, and program maturity roadmaps to executive leadership. - Comply with all applicable laws/regulations, as well as company policies/procedures - Perform other duties as required **Disclaimer**: This job description is general in nature and is not designed to contain or to be interpreted as a comprehensive inventory of all duties, essential functions and qualifications required of employees assigned to the job. **QUALIFICATIONS:** - Bachelor’s degree in business, Computer Science, Information Systems or related field. - Five (5) years’ experience in information technology, cybersecurity, GRC, technology risk, application security or data privacy. - Knowledge of enterprise technology, governance functions, framework structures, and the operational application of the NIST AI Risk Management Framework. - Proven background in Application security and/or data security environments. - Excellent executive presence with the ability to distill data science and artificial intelligence lifecycle concepts into strategic language for executive leadership. - Demonstrated ability to operate comfortably with ambiguity. - Ability to lead the development of compliance workflows from the ground up. - Strong interpersonal and collaborative skills to partner successfully across both developer groups and non-technical business units. - Familiarity with enterprise AI platforms such as Microsoft Copilot, Google Gemini, or Claude. - Relevant professional certifications (e.g., IAPP Certified AI Governance Professional (AIGP), CISM, or CISSP) are preferred. **WORKING CONDITIONS:** - Must be able to travel **Pay Transparency:** The compensation listed reflects the pay range or rate of pay reasonably expected for this posted position at the posted location(s). If this opportunity includes multiple job levels, the pay information represents the minimum and maximum range for all levels. Actual pay is determined by job-related factors permitted by law and relevant to the position, such as experience, tenure, market level, pay at the location for this job, performance, schedule, and work assignment. Eligible employees offered health, vision, dental, life, AD&D, STD and LTD insurance, employee assistance program, personal/sick paid time, 401(k) retirement savings plan, bonus potential, tuition reimbursement, adoption assistance, 2 weeks paid parental leave, paid bereavement, employee…