Director, Artificial Intelligence Risk Management & Governance

Is this role right for you?

In this role, you will be involved in:

AI Risk Management Standard

• Own the design, maintenance, and continuous improvement of the AI risk management standard, in alignment with Bank policies, including acceptable use and AI ethics requirements.
• Align the framework with applicable regulations and industry standards, such as OSFI E-23, U.S. Federal Reserve model risk guidance (SR 11-7), and the NIST AI Risk Management Framework.
• Maintain the AI control catalogue and map AI-specific risks to existing risk taxonomy categories, including model, privacy, third-party, cyber, operational, legal, and conduct risk.

AI Intake, Assessment, and Oversight

• Lead the AI risk assessment process, including tiering of use cases by risk, Trusted AI assessments, and required mitigations before deployment.
• Provide risk-based guidance and approval recommendations for generative AI and other emerging use cases, including conditions for client-facing or external use.
• Maintain the enterprise AI inventory and monitor use cases for ongoing compliance, performance, bias, explainability, and drift.
• Establish guardrails and restrictions for higher-risk capabilities, such as agentic AI, until governance and controls are in place.

Governance, Reporting, and Regulatory Engagement

• Support Data and AI steering groups and governance forums, with clear decision rights and escalation paths.
• Produce executive reporting on AI risk exposure, key risk indicators, issues, and remediation progress.
• Serve as a primary contact for regulators, internal audit, and second- and third-line functions on AI risk matters.
• Track the evolving regulatory and industry landscape and translate changes into practical requirements for the bank.

Partnership and Leadership

• Partner with Scotia Intelligence, Harbour, technology, and business lines to embed AI risk controls into delivery and the data lifecycle.
• Collaborate with Model Risk, Privacy, Legal, Compliance, Cybersecurity, and Third-Party Risk to ensure consistent, non-duplicative oversight.
• Lead and develop a team of AI risk professionals, fostering a culture of accountability, curiosity, and responsible innovation.
• Promote AI risk awareness through training, guidance, and clear, business-friendly communication.

Direct Reports: 4+

Do you have the skills that will enable you to succeed? We’d love to work with you if you have the following:

• 10+ years of progressive experience in AI risk, model risk, data risk, technology risk, responsible AI, or a related risk/governance discipline within a complex organization.
• 7+ years of leadership experience, including experience building, leading, and developing high-performing teams.
• Demonstrated experience developing and implementing enterprise AI, model, data, or technology risk management frameworks, standards, controls, and governance processes.
• Strong understanding of AI and emerging technology risks, including generative AI, model performance, explainability, bias and fairness, privacy, third-party risk, cybersecurity, and responsible AI considerations.
• Knowledge of relevant AI and model risk regulatory requirements and industry frameworks, including OSFI E-23, SR 11-7, NIST AI Risk Management Framework, and evolving AI regulatory expectations.
• Proven experience translating regulatory, risk, and technical requirements into practical controls, standards, processes, and guidance that enable responsible business adoption.
• Strong strategic and analytical capabilities, with demonstrated experience influencing senior leaders and partnering across business, technology, risk, compliance, legal, privacy, cybersecurity, and other control functions.
• Excellent relationship management and communication skills, with the ability to communicate complex AI and risk concepts clearly to technical, business, executive, audit, and regulatory audiences.