AI Compliance Strategy Manager

Responsibilities

• Advise UK and European financial-services customers on deploying AI controls for legal, regulatory, conduct, operational, and reputational risk.
• Assess customer AI governance, risk, and control environments; map guardrails into processes, risk taxonomies, control libraries, risk-and-control self-assessments, and evidence workflows.
• Define AI-risk target operating models, including decision rights, RACI matrices, governance forums, escalation paths, and lifecycle responsibilities.
• Apply the three lines of defense model to position control ownership, oversight, challenge, and independent assurance.
• Lead workshops, demonstrations, and training for senior and operational stakeholders.
• Translate UK, EU, and global laws, regulations, supervisory expectations, and customer policies into guardrail objectives, requirements, and test cases.
• Design, document, and validate AI guardrails and evaluations, including objectives, risks, coverage, thresholds, limitations, ownership, and evidence requirements.
• Build datasets, scenarios, and review cycles to test regulatory, conduct, privacy, security, and operational-risk use cases.
• Partner with product, engineering, and deployment teams to monitor guardrails in production and improve controls, workflows, reporting, and guidance.
• Support control-alert and exception-triage workflows, including materiality assessment, severity classification, routing, rationale documentation, and remediation tracking.
• Help customers establish auditable evidence standards, testing approaches, issue-management routines, and documented approvals.
• Support control design and operating-effectiveness assessments, gap identification, remediation planning, and residual-risk communication.
• Prepare control narratives, risk-and-control matrices, test plans, management reports, and audit or assurance-readout materials.
• Provide customer and market insight for product improvements related to guardrail creation, reporting, observability, and usability.

Requirements

• Approximately 3–6 years of relevant experience in financial services, a regulated industry, or consulting/advisory serving regulated clients.
• Hands-on experience with business controls or control offices, process-risk-control frameworks, operational or non-financial risk, compliance assurance, internal audit, or risk-and-controls consulting.
• Working understanding of the three lines of defense model.
• Experience designing, documenting, testing, monitoring, or evidencing controls.
• Ability to analyze ambiguous regulatory, policy, or operational requirements and convert them into actionable controls and client materials.
• Strong written and verbal communication skills with senior risk, compliance, legal, technology, and business stakeholders.
• Strong project-management skills and ability to drive multiple workstreams.
• Comfort working remotely and in person in a fast-moving environment.
• Willingness to travel up to 30%.

Nice-to-haves

• AI governance, AI risk management, model risk management, data governance, privacy, responsible AI, automated decisioning, or technology-risk experience.
• Familiarity with UK financial-services regulation and supervisory expectations, including FCA and PRA requirements, and relevant UK and EU AI, data-protection, or digital-resilience considerations.
• Experience with assurance reviews, internal or external audits, or regulatory examinations.
• Experience designing operational triage, exception-management, incident-management, or issue-remediation workflows.
• Familiarity with AI observability, monitoring, security workflows, governance tooling, or controls automation.
• Foundational knowledge of machine learning, large language models, or AI evaluation concepts.