Assistant Director/ Manager- AI Risk And Governance Technical Expert - Workstream Lead Support

The opportunity

This is an exciting opportunity to join the GDS Risk Management Services (RMS) Innovation Risk function in Gurgaon, India as an Assistant Director/ Manager providing technical expertise and delivery support across AI Risk and Governance workstreams.

Working closely with the workstream lead, you will help translate Responsible AI principles, regulatory expectations and control requirements into practical technical and governance measures. You will provide technical input into the assessment of AI systems and use cases, identify risks and control gaps, review relevant technical evidence, and support the development of proportionate and implementable risk mitigation measures.

The role will support the responsible development, deployment, use and monitoring of AI systems, including generative AI and machine learning solutions. You will work collaboratively with technology, business, risk, legal, data protection, information security, procurement and quality stakeholders.

Your responsibilities

• Support the workstream lead in planning and delivering assigned AI Risk and Governance workstreams, while maintaining clear visibility of milestones, dependencies, risks and upcoming decisions.
• Coordinate cross-functional reviews involving Global Risk Management, Service Lines, EY Technology, Global Functions, Regions and enabling teams such as Legal/GCO, Data Protection, Information Security, Procurement/Supply Chain and Quality.
• Prepare, review and maintain workstream drafts, guidance, control requirements, templates, action trackers, decision logs and other governance artefacts for review and approval.
• Assist in developing practical implementation plans for new or updated AI guidance and controls, and support communication and adoption across service lines, functions and geographies.
• Support activities across the AI governance lifecycle, including intake, risk assessment, QRM review, validation, release or go-live conditions, evidence readiness and post-deployment monitoring.
• Prepare materials for AI governance forums and leadership reporting, including status updates, decision papers, metrics, risk summaries, meeting notes and follow-up trackers.
• Perform or support risk-based technical assessments of AI systems and tools that are built, bought, deployed or used by EY, evaluating their alignment with Responsible AI principles and relevant data protection, information security, AI security, third-party risk, technology risk and quality requirements.
• Identify and assess technical risks such as inaccurate or unreliable outputs, bias, lack of explainability, data leakage, prompt injection, insecure integrations, insufficient human oversight and model or performance drift.
• Review whether proposed technical and procedural controls are appropriately designed to manage identified risks across the AI lifecycle, including testing, approval, deployment, monitoring, change management and incident management.
• Work with technology owners, developers, architects, data professionals and risk SMEs to translate technical findings into clear risk statements, proportionate control requirements and practical remediation actions.
• Conduct research on emerging regulatory expectations, market developments and Responsible AI practices, and summarize potential implications for workstream activities and stakeholder guidance.
• Support in developing and maintaining enablement materials such as playbooks, checklists, FAQs and templates to help teams apply governance requirements.

Technical Skills

• Working knowledge of AI risk, Responsible AI principles, AI governance processes and the AI system lifecycle.
• Understanding of data protection, information security, third-party AI risk, evidence management, issue tracking and governance reporting.
• Familiarity with AI risk assessments, control frameworks, system or model documentation, evidence packs and audit-readiness expectations.
• Exposure to AI regulatory expectations, including the EU AI Act or similar governance frameworks.
• Strong understanding of AI and machine learning concepts, including generative AI, large language models, foundation models, retrieval-augmented generation and the end-to-end AI system lifecycle.
• Ability to understand and critically review AI solution architecture, data flows, system integrations, model or system documentation, evaluation results, technical limitations and control design.
• Knowledge of key AI risks, including bias and fairness, explainability, inaccurate or unreliable outputs, robustness, privacy, data leakage, prompt injection, adversarial threats, performance drift and human overreliance.
• Practical experience conducting or supporting AI, technology, data, information security, model or algorithmic risk assessments.
• Understanding of AI testing and evaluation approaches, including performance assessment, robustness testing, bias and fairness evaluation, security testing, red teaming and post-deployment monitoring.
• Familiarity with AI regulatory and governance frameworks, including the EU AI Act, NIST AI Risk Management Framework, ISO/IEC 42001 or comparable frameworks.
• Understanding of data protection, information security, third-party technology risk, secure development, evidence management, issue management and audit-readiness expectations.
• Ability to translate technical findings into clear risk statements, control requirements, remediation recommendations and concise leadership reporting.
• Familiarity with technical or analytical tools such as Python, SQL, Power BI, Azure AI services, source-code repositories or AI testing and monitoring tools would be advantageous.
• Strong drafting and documentation capability, including preparation of guidance, templates, decision notes, status updates, metrics and review observations.
• Proficient in using digital tools such as generative AI platforms, Microsoft Excel and PowerPoint for research, analysis, reporting and presentations.

Business Skills

• Strong analytical and problem-solving skills, with the ability to identify gaps, clarify requirements, assess implications and propose practical next steps.
• Ability to manage multiple activities, deadlines and provide timely progress updates to the leadership and stakeholders.
• Effective stakeholder management and relationship-building skills, with the confidence to work with business owners, technology owners and risk or compliance subject-matter professionals.
• Clear written and verbal communication skills, with the ability to present complex topics in a concise, practical and audience-appropriate manner.
• Ability to work through ambiguity, respond to evolving requirements and exercise sound judgment while seeking guidance on material or sensitive matters.
• Collaborative and service-oriented approach, with attention to detail, accountability and action closure.

To qualify for the role, you must have

• Post Graduate degree or equivalent professional qualification in risk management, governance, compliance, technology, computer science, artificial intelligence, machine learning, data science, information systems, engineering, cybersecurity, technology risk or a related discipline.
• Approx. 10 years of relevant experience in risk management, governance, compliance, technology risk, Responsible AI, or related areas.
• Demonstrable experience reviewing or assessing AI-enabled systems, technology solutions, solution architecture, data flows, technical contro