Responsibilities

• Implement M365 AI governance controls
• Configure and maintain DLP rules, sensitivity labels, Conditional Access policies, and audit logging for AI and Copilot workloads, ensuring controls are aligned to the firm's security posture and regulatory requirements.
• Build and maintain the AI inventory
• Lead AI system discovery and mapping, manage the sanctioning and vetting process for new AI tools, and maintain evidence traceability across the full AI lifecycle to support audit and regulatory review.
• Deploy risk‑based governance controls
• Assess AI systems against defined risk categories, apply scoring and treatment frameworks, and ensure controls are traceable to regulatory obligations – including EU AI Act high‑risk classifications where applicable.
• Automate governance workflows
• Design and support automated intake, approval, exception handling, and change management workflows using ent...