AI Risk & Compliance Specialist

Specifically, the successful jobholder will be required to: Implement and maintain the Bank’s responsible AI governance framework, policies, standards, controls and approval processes. Maintain an enterprise-wide inventory of AI use cases, models, providers and third-party AI tools, ensuring appropriate ownership, risk classification, approvals and lifecycle monitoring. Conduct AI risk and impact assessments covering data protection, cybersecurity, model risk, bias and fairness, explainability, human oversight, third-party risk and regulatory compliance. Establish risk-based control, testing and evidence requirements, including model validation, bias testing, generative AI safeguards and incident management. Coordinate independent reviews and approvals with Risk, Legal, Compliance, Data Protection, ICT Security, Model Risk and relevant business control owners. Monitor AI risks, control effectiveness, model performance, incidents, complaints and remediation actions, preparing reports for management and Board governance forums. Support investigations and resolution of AI-related incidents, control breaches and performance concerns, ensuring lessons learned inform improved controls and practices. Monitor emerging AI regulations and industry developments, maintain governance documentation, and promote responsible AI awareness through targeted training and guidance.

Skills, Competencies and Experience

The successful candidate will be required to have the following skills and competencies:

A bachelor’s degree in Risk Management, Law, Compliance, Information Systems, Data Science, Computer Science, Statistics or a related field.

At least six (6) years of relevant experience in risk management, compliance, audit, privacy, model risk, technology risk, data governance or AI governance.

Demonstrated experience designing or implementing governance and control frameworks within a regulated environment.

Practical exposure to AI/ML risk, model lifecycle controls, data protection and third-party technology risk will be an added advantage.

A relevant postgraduate qualification and professional certification in risk, compliance, privacy, information security, audit, data governance or responsible AI will be an added advantage.