AI Governance Risk Manager Central Europe

We are looking for a highly structured and risk‑aware AI Governance Vendor Risk Manager to own and operationalise the AI Phase Gate process and vendor onboarding for AI solutions. This role sits at the heart of responsible AI scaling, ensuring that all AI initiatives (internal and vendor-based) are properly assessed, approved, and governed in line with internal policies and regulatory requirements such as the EU AI Act. You will act as the control point between innovation and risk, enabling the business to move fast while ensuring safe, compliant, and transparent AI adoption. Key Responsibilities Own the AI Phase Gate Process Lead and continuously improve the end‑to‑end AI Phase Gate framework (from intake to approval) Run structured Phase Gate reviews at key lifecycle stages (e.g., POC, pre‑production) Ensure each AI use case is: Properly classified (prohibited, high, limited, minimal risk) Assessed with clear mitigation actions Approved with defined ownership and conditions Coordinate cross‑functional input (Legal, Privacy, Security, Risk, Sustainability) into a single, coherent decision Own the governance process for onboarding third‑party AI tools and vendors Ensure all vendors undergo a structured multi‑domain risk assessment (legal, privacy, cyber, AI‑specific) before approval Assess AI capabilities and risk exposure Assess data access and usage rights Ensure compliance with internal policies and regulatory standards Define and enforce conditions for vendor use, including contractual requirements and monitoring mechanisms Maintain alignment with broader vendor risk management frameworks and procurement processes Execute AI Risk Assessment & Governance Controls Lead risk assessments for AI systems, including regulatory and ethical dimensions (e.g., EU AI Act alignment) Define clear mitigation actions, ownership, and follow‑up mechanisms for each risk Ensure documentation is complete, auditable, and reflected in the AI inventory Support high‑risk AI reviews, ensuring additional controls and escalation where required Maintain AI Inventory & Governance Traceability Ensure all AI systems are accurately captured in the AI catalogue (inventory, classification, decisions, ownership) Track Phase Gate decisions, risk assessments, and approval conditions Ensure all governance artefacts are audit‑ready and consistent Skills required 7–10 years of experience in risk, compliance, or governance roles within large enterprise environments Demonstrated experience owning or operating structured governance frameworks, phase gate processes, or control checkpoints for technology or AI initiatives Hands‑on experience conducting vendor risk assessments across multiple domains, including legal, privacy, cybersecurity, and contractual compliance Working knowledge of the EU AI Act and its practical implications for AI system classification and risk controls Familiarity with data privacy regulations (e.g., GDPR) as they apply to third‑party AI tools and data usage rights Ability to maintain audit‑ready documentation, governance artefacts, and risk registers with high accuracy and traceability Experience coordinating cross‑functional stakeholders—Legal, Privacy, Security, Risk—toward a single governance decision Sufficient AI/ML literacy to assess the risk exposure and capabilities of AI systems without necessarily being a technical practitioner Strong written and verbal communication skills, with the ability to translate complex risk findings for both technical and non‑technical audiences Comfortable operating with influence rather than authority across teams and vendors Nice to have Prior involvement in building or scaling an AI inventory or AI catalogue Exposure to responsible AI principles, AI ethics frameworks, or sustainability considerations in technology governance Background in procurement or technology contracting #J-18808-Ljbffr Zoolatech