Governance, Risk and Compliance (GRC) AI Lead

Make an Impact as a Governance, Risk, and Compliance (GRC) AI Lead at Worldwide

Artificial intelligence is rapidly changing how organizations operate, and effective governance is essential to ensuring that innovation happens responsibly. As the Governance, Risk, and Compliance (GRC) AI Lead, you will play a central role in shaping how AI is governed across Worldwide Clinical Trials. You will build and lead the Enterprise IT AI Governance framework, creating practical, risk-based processes for AI systems, AI-enabled technologies, and AI agents throughout their lifecycle. From initial use-case evaluation and approval through ongoing monitoring and retirement, you will help ensure AI is adopted securely, responsibly, and in alignment with regulatory, contractual, and business requirements.

This is a highly collaborative role where you will partner with business owners and experts across Information Security, Privacy, Legal, Quality, Enterprise Architecture, Data, Vendor Management, and Procurement. You will bring these perspectives together while maintaining clear accountability and enabling teams to pursue AI opportunities with appropriate controls and human oversight.

Where You'll Work

This is a remote role open to candidates based in the US. You will collaborate with global teams across multiple time zones.

What You'll Do

• Build and maintain the Enterprise IT AI Governance framework, including the operating model, standards, procedures, decision rights, risk tiers, controls, and governance records.
• Establish a company-wide intake, assessment, and approval process for AI use cases, AI-enabled vendor products, internally developed solutions, and AI agents.
• Maintain a centralized inventory of AI systems and agents, capturing ownership, intended use, data sources, permissions, dependencies, risk classification, approval status, and lifecycle information.
• Lead risk-based governance reviews in partnership with Information Security, Privacy, Legal, Quality, Enterprise Architecture, Data, Vendor Management, Procurement, and other subject-matter experts.
• Define governance requirements for AI agents, including ownership, approved purpose, identity and access, human oversight, testing, monitoring, logging, change control, incident response, and secure retirement.
• Coordinate reviews of cybersecurity, privacy, quality, third-party, and operational risks associated with AI, including sensitive data exposure, prompt injection, excessive agency, insecure integrations, identity misuse, unauthorized actions, and supply-chain dependencies.
• Strengthen governance for clinical, GxP, and other regulated AI use cases by partnering with Quality and business owners on validation, human oversight, data integrity, change control, recordkeeping, and inspection readiness.
• Monitor approved AI technologies for material changes, control exceptions, incidents, performance concerns, and emerging requirements, triggering reassessment and remediation when appropriate.
• Deliver practical governance guidance, training, metrics, executive reporting, and audit-ready evidence while advising leadership on emerging AI risks, governance gaps, and investment needs.

What You'll Bring

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Data Science, Risk Management, Business, Law, or a related field; an advanced degree is preferred.
• 8+ years of progressive experience in governance, risk and compliance, technology risk, cybersecurity, privacy, data governance, audit, quality, or a related discipline, including 3+ years leading enterprise governance programs, cross-functional risk initiatives, or technology control frameworks.
• Demonstrated experience developing policies, standards, risk assessments, control requirements, governance workflows, metrics, and executive reporting.
• Working experience with AI governance, responsible AI, generative AI, machine learning, automation, AI-enabled vendor products, or AI agent governance is strongly preferred.
• Strong understanding of technology risk, information security, privacy, third-party risk, data governance, and regulatory compliance, with practical knowledge of large language models, AI agents, machine identities, and AI lifecycle risks.
• Experience within a regulated, global, life sciences, healthcare, or clinical research environment is highly desirable, along with familiarity with recognized AI, risk, security, and privacy frameworks and applicable AI laws and regulations.
• Strong program-management, stakeholder-management, and communication skills, with the ability to translate complex legal, regulatory, security, privacy, quality, and business requirements into practical controls and clearly communicate risk to technical and nontechnical audiences.
• Proficiency in English, with the ability to collaborate effectively across global time zones and manage multiple governance priorities.