AI Risk & Governance Manager

About the role

Assurity Trusted Solutions (ATS), a wholly owned subsidiary of GovTech, is looking for an AI Risk & Governance Manager to establish and lead governance for AI-enabled capabilities across the National Cybersecurity Command Centre (NC3). The role ensures AI systems are secure, responsible, explainable and properly controlled, and coordinates security compliance, vulnerability governance, audits and risk-register management under IM8, ISO-27001 and AI governance principles. It is a contract role until 31 March 2029, with possible renewal.

Key responsibilities

• Develop and maintain the AI governance framework, policies, standards, decision rights, lifecycle controls and assurance requirements.
• Establish an inventory and risk classification of AI use cases, models, data sources, owners, vendors and dependencies.
• Conduct or coordinate AI risk and impact assessments covering data quality, privacy, security, explainability, robustness, human oversight, misuse, bias, model drift and operational failure modes.
• Define governance gates and evidence requirements across the AI lifecycle, including use-case approval, data readiness, model validation, security testing, deployment, monitoring, change management and retirement.
• Work with product managers, engineers, data teams, cybersecurity teams and operational users to turn policy into practical controls, acceptance criteria, SOPs and monitoring measures.
• Define monitoring and reporting for AI performance, drift, anomalies, overrides, incidents and control effectiveness.
• Coordinate security compliance reviews, vulnerability governance, audits and assurance activities.
• Maintain the risk register, control exceptions, remediation plans and management reporting.
• Review third-party AI solutions and contracts for governance, security, data handling, IP, support and exit considerations.
• Support governance forums, prepare decision papers and risk briefings, and raise awareness of responsible and secure AI adoption.

Required profile

• Relevant degree in Computer Science, Data Science, AI, Cybersecurity, Information Systems, Risk Management or a related discipline.
• At least 8 years of experience in technology governance, cybersecurity, risk, compliance, audit, data governance or AI, including leading cross-functional governance initiatives.
• Strong understanding of AI and ML lifecycles, model risks, explainability, robustness, monitoring and third-party AI risks.
• Experience building governance frameworks, policies, risk assessments, audit evidence, management reporting and remediation plans.
• Good knowledge of cybersecurity, vulnerability management, privacy and data governance; familiarity with IM8, GovTech requirements or ISO 27001 is preferred.
• Familiarity with NIST AI Risk Management Framework and ISO/IEC 42001 is advantageous.
• Strong stakeholder management, analytical, facilitation, writing and presentation skills, able to engage senior management, technical teams, auditors and vendors.

Required skills

• Cybersecurity, vulnerability management and data governance
• AI and machine-learning lifecycles and model risk assessment
• IM8 and ISO 27001 requirements (preferred)
• NIST AI Risk Management Framework and ISO/IEC 42001 (advantageous)

What we offer

• A learning culture with annual leave, Family Care and Birthday Leave.
• A collaborative working environment.
• Contract staff enjoy the same benefits as permanent staff.