The
Director, Data & AI Risk Management, leads and delivers enterprise risk management activities that help AstraZeneca identify, assess, govern, report, and reduce Data & AI risk.
The role provides practical risk advisory, consulting, governance, and risk appetite support across regulatory compliance, data protection, AI governance, and related risk domains.
Reporting to the Senior Director, Data & AI Risk Management, the Director partners across Data & AI Trust and Assurance and with business and enabling functions to translate complex risk and regulatory expectations into clear decisions, proportionate mitigations, and measurable improvements in risk posture.
The role also leads cross-functional projects and supports enterprise governance forums and Enterprise Risk Management reporting, enabling responsible and confident use of Data & AI at scale.
Typical Accountabilities - Provide trusted risk advisory, consulting, and risk appetite support across Data & AI risks, helping stakeholders make timely, proportionate, and well-informed decisions.
- Provide governance and business analysis support across regulatory compliance, data protection, AI governance, and other Data & AI risk areas, translating complex requirements into clear risk positions, decisions, and actions.
- Lead and/or project manage priority initiatives across Data & AI Trust and Assurance, irrespective of team boundaries, including Standards and Controls rollout and regulatory compliance programmes covering requirements such as the US Data Security Program, EU AI Act, European Health Data Space, and other emerging obligations.
- Improve visibility of Data & AI risk posture by developing clear narratives, indicators, dashboards, and insights on material exposures, trends, mitigations, residual risk, and progress against appetite.
- Engage business and functional stakeholders to build relationships and understand risk exposure, challenge the adequacy of mitigations, agree pragmatic remediation, and help drive residual risk and overall risk posture down.
- Lead selected aspects of Data & AI risk aggregation, analysis, and reporting for Enterprise Risk Management, senior leadership, and governance bodies.
- Facilitate risk assessments, workshops, and decision forums for complex or novel Data & AI use cases, balancing enablement, compliance, and protection of patients, the company, and its information and intellectual property.
- Synthesize complex issues into concise, executive-ready narratives; anticipate stakeholder concerns; navigate ambiguity; and influence decisions in high-stakes forums.
- Partner with Regulatory Intelligence, Legal, Compliance, Privacy, Cyber Risk, Enterprise Risk Management, Data Offices, and risk teams in R&D, Operations, Commercial, Enabling Units, and other business functions to align risk approaches and accountabilities.
- Work across Data & AI Trust and Assurance teams to accomplish shared goals, resolve cross-cutting issues, and deliver integrated outcomes across policy, standards and controls, assurance, monitoring, risk, and regulatory readiness.
- Identify opportunities to simplify and continuously improve Data & AI risk management processes, governance, reporting, and stakeholder experience while preserving effective oversight.
- Promote a culture of responsible, compliant, and value-focused use of Data & AI, demonstrating AstraZeneca values in all interactions.
Education, Qualifications, Skills, and Experience Essential- Bachelor's degree in business administration, Risk Management, Information/Data Science, Informatics, Computer Science, Economics, Law, or a related discipline, or equivalent relevant experience.
- Significant experience in risk management, assurance, governance, regulatory compliance, or second-line oversight within a complex, global organisation.
- Demonstrated experience assessing and managing data, technology, digital, and/or AI risks and translating complex issues into pragmatic business decisions.
- Strong project leadership and project management capability, including delivery through cross-functional and matrixed teams, such as Regulatory Compliance, areas of organisational risk, AI governance, or related disciplines.
- Experience providing risk advisory or consulting support, including risk appetite, mitigation, escalation, and risk acceptance discussions.
- Working knowledge of relevant Data & AI regulatory and compliance requirements, such as the US Data Security Program, EU AI Act, European Health Data Space, GDPR, GxP, NIS2, or comparable frameworks.
- Experience with governance forums, executive reporting, risk indicators, dashboards, or Enterprise Risk Management processes.
- Strong business analysis, facilitation, and problem-solving skills, with the ability to structure ambiguity and establish clear ownership and actions. This includes working across domains such as regulatory compliance, data protection, AI governance, or related disciplines to translate requirements into clear risk positions, decisions, accountabilities, and actions.
- Demonstrated experience developing risk reporting to support senior management decision-making.
- Proven ability to build partnerships across Legal, Compliance, Privacy, Cyber Security, Enterprise Risk Management, Data Offices, technology, and business functions.
- Excellent written and verbal communication, with the credibility to influence senior stakeholders and present concise, decision-oriented recommendations.
- Strong collaboration, negotiation, and change leadership skills, with a practical, proportionate, and enablement-focused mindset.
Desirable- Master's degree or advanced qualification in Business Administration, Risk Management, Information/Data Science, Informatics, Computer Science, Economics, Law, or a related discipline.
- Experience in life sciences, healthcare, or another highly regulated industry.
- Practical knowledge of ISO/IEC 42001, the NIST AI Risk Management Framework, or recognised enterprise risk and control frameworks.
- Data, AI, privacy, compliance, audit, governance, or risk management education and professional certifications.
- Experience implementing or assessing standards and controls and linking regulatory obligations, risks, controls, assurance, and reporting.
- Knowledge of key pharmaceutical business processes across R&D, Operations, Commercial, and Enabling Units.
The annual base pay (or hourly rate of compensation) for this position ranges from $153,480.80 - $230,221.20 USD . Our positions offer eligibility for various incentives-an opportunity to receive short-term incentive bonuses, equity-based awards for salaried roles and commissions for sales roles. Benefits offered include qualified retirement programs, paid time off (i.e., vacation, holiday, and leaves), as well as health, dental, and vision coverage in accordance with the terms of the applicable plans.
#EAI
Date Posted25-Sept-2026
Closing Date02-Oct-2026
