Principal, Privacy - AI Governance

Summary

The AI Governance Principal supports enterprise AI governance activities under the direction of the Privacy Officer and in coordination with stakeholders on the AI Governance Counsel, including Legal, Privacy, Compliance, Security, Procurement, Product, and business stakeholders. This role is responsible for administering and maintaining the AI governance operating model, including the AI use case intake and review process, centralized repositories of submitted and approved use cases, governance documentation, meeting records, policy and standards updates, and trackers for client and state-law AI restrictions. The AI Governance Principal helps ensure that AI use cases are reviewed consistently, documented appropriately, monitored over time, and aligned with applicable legal, regulatory, contractual, privacy, security, and internal policy requirements. This role also supports reporting, audit readiness, training, and continuous improvement of AI governance processes.

Your role in our mission

• Maintain and administer the centralized AI use case repository and approval inventory, including submitted, approved, conditionally approved, deferred, declined, active, retired, and re-review-required use cases.

• Manage the AI use case intake workflow, perform initial triage for completeness, and coordinate with business owners to obtain required information and supporting documentation.

• Review submitted AI use cases for completeness and readiness for governance review, including alignment to required intake materials, risk information, intended use, data considerations, and applicable governance artifacts.

• Coordinate the preparation of governance review materials, including impact assessments, solution overviews, model documentation, risk mitigation plans, quality plans, monitoring plans, and other responsible AI artifacts.

• Organize, schedule, and maintain documentation for AI governance meetings, including agendas, presentation materials, minutes, decisions, conditions of approval, action items, and follow-up requests.

• Maintain a centralized record of governance decisions, conditions, limitations, remediation items, monitoring requirements, and escalation triggers to support defensible and auditable AI governance.

• Track approved AI use cases through the governance lifecycle, including clearance, go-live approval, monitoring obligations, material changes, periodic review dates, and retirement or re-review activities.

• Maintain and update trackers for client contractual AI restrictions, disclosure obligations, data-use restrictions, CERP or similar approval requirements, and applicable state AI laws and regulations that may affect proposed or active use cases.

• Support maintenance and periodic updates to AI governance policies, standards, procedures, templates, FAQs, guidance, and review criteria to reflect legal, regulatory, and business changes. This includes maintenance of AI Team SharePoint Intranet Site that hosts this documentation.

• Partner with Legal, Privacy, Compliance, Security, Procurement, and business stakeholders to identify required safeguards, contractual dependencies, approval conditions, and remediation actions for AI use cases.

• Prepare dashboards, reports, and metrics regarding intake volume, use case status, approval trends, risk themes, pending actions, and monitoring activities for leadership and governance stakeholders. The internal sources support centralized tracking artifacts, though they do not specify exact dashboard requirements; this item is included as a practical extension of those responsibilities.

• Support audit readiness, records management, and response preparation for internal reviews, client inquiries, and other requests requiring documentation of AI governance decisions and controls.

• Develop and maintain process documentation and training materials to promote consistent adoption of AI governance requirements across the organization.

• Monitor for process improvement opportunities and help refine governance workflows, templates, intake quality controls, and repository structure to improve efficiency, traceability, and transparency. This is a recommended responsibility based on the documented operating model and centralized governance framework.

What we're looking for

• Bachelor’s degree in Business, Public Policy, Information Governance, Information Security, Compliance, Legal Studies, Health Administration, or a related field.

• Minimum of 10 years of experience in privacy, security, compliance, legal operations, risk management, governance, policy administration, or a related function. Healthcare, HIPAA, and regulated-industry experience preferred.

• Experience supporting governance processes, writing and editing policies, maintaining trackers or repositories, documenting decisions, and coordinating cross-functional reviews.

• Familiarity with AI governance concepts, generative AI use cases, model and solution documentation, and responsible AI principles.

• Working knowledge of applicable privacy, security, and compliance concepts, including data-use restrictions, contractual controls, and legal/regulatory obligations affecting AI use.

• Familiarity with recognized AI governance and risk frameworks, such as the NIST AI Risk Management Framework.

• Strong written communication skills, including the ability to draft clear summaries, meeting documentation, governance records, policies, procedures, and leadership reports.

• Strong analytical and organizational skills, with high attention to detail and the ability to manage multiple competing priorities and deadlines.

• Experience using Microsoft 365 tools such as Excel, SharePoint, Teams, Word, and PowerPoint; experience with workflow, reporting, or dashboarding tools is preferred.

• Ability to work effectively across legal, privacy, compliance, technology, and business teams and to communicate with both technical and non-technical stakeholders.

• AIGP certification is preferred. Relevant certifications such as CIPP/US, CIPM, CISSP or similar are a plus.

What you should expect in this role