Artificial Intelligence Governance and Risk Manager

• Own day-to-day execution of AI governance and risk review across Ferguson's AI portfolio




• Evaluate AI use cases, vendors, and tools against Ferguson's risk framework




• Run the AI Impact Assessment process from intake through disposition




• Maintain the AIIA repository and AI registry as governance records




• Own routing logic for required reviews based on data classification, AI Solution Tier, vendor/tool status, and agentic status




• Complete AI-specific assessments before requests proceed to Sourcing, InfoSec, and Legal




• Conduct high-level data privacy impact screens and assess fairness, bias, and explainability




• Define escalation criteria for full PIA, Legal review, or AI Council-level escalation




• Identify materially changed approved use cases requiring re-review




• Own vendor and tool AI risk reviews and coordinate vendor risk disposition through Ironclad




• Develop an agentic AI review approach with AI Technology & Innovation




• Build visibility into unapproved AI usage and administer AI governance/discovery tooling




• Support teams using unapproved tools in migrating to approved alternatives




• Track and report governance health metrics to the Senior Manager




• Maintain awareness of the AI regulatory landscape and support a regulatory register




• Draft and refine AI governance policies, standards, and guidelines with the Senior Manager

Requirements

• Experience in AI/technology governance, risk management, or compliance operations, ideally in a matrixed enterprise environment




• Working knowledge of legal and regulatory considerations related to AI, data privacy, vendor risk, and responsible technology governance




• Data privacy experience, including working knowledge of data classification and privacy impact assessment methodology




• Working knowledge of GRC processes and third-party/vendor risk review




• Experience with AI discovery, monitoring, or governance tooling, including hands-on administration




• Ability to operate independently against a governance framework that is still maturing




• Autonomous decision making to assess when and what level of governance assessment is needed




• Strong cross-functional coordination skills




• Privacy certification (e.g., CIPP/E, CIPM) alongside AI governance training or audit credential (preferred)




• Familiarity with AI-specific risk considerations, including model risk, agentic system risk, and bias/explainability (preferred)




• Experience standing up or operating governance committee structures (preferred)

Core Competencies

Demonstrates expertise in AI governance, risk management, and compliance operations, with a strong focus on data privacy and regulatory considerations. Proficient in evaluating AI use cases and vendor risk while maintaining governance records and metrics.

Highest-signal resume keywords

• AI Governance




• Risk Management




• Data Privacy Impact Assessment




• Vendor Risk Review




• GRC Processes

Hard Skills

• AI Risk Assessment




• Data Classification




• Privacy Impact Assessment Methodology




• AI Discovery Tooling




• Governance Framework Implementation

Soft Skills

• Cross-Functional Coordination




• Autonomous Decision Making

Certifications & Qualifications

• CIPP/E




• CIPM

Industry Keywords

• AI Regulatory Landscape




• Responsible Technology Governance




• Bias and Explainability




• Governance Committee Structures

Tools & Technologies

• AI Governance Tooling




• Ironclad