Leads the enterprise control system and cross-functional governance operating model for artificial intelligence across use cases and internal models. The role maintains the AI inventory and risk-tiering model, directs lifecycle assessment and monitoring, translates healthcare, audit, NIST, ISO, accreditation, and regulatory expectations into operating controls, and produces timely, auditable decisions and readiness evidence. Within delegated authority, the Director may condition, pause, or reject AI use when evidence indicates unacceptable risk and personally builds and automates governance mechanisms while preserving the authorities of risk owners and independent control functions.
- Establish and continuously improve the enterprise responsible-AI framework, policies, standards, risk taxonomy, decision rights, lifecycle controls, and assurance model.
- Maintain an authoritative inventory of AI systems and use cases and define proportionate risk tiers, review paths, evidence requirements, monitoring obligations, material-change triggers, and retirement criteria.
- Lead risk assessments for proposed and operating AI use cases and internal models and document residual risk, required controls, owners, conditions, exceptions, monitoring, and decision rationale.
- Exercise delegated authority to condition, pause, or reject AI use when documented evidence indicates unacceptable risk or required controls are not operating effectively.
- Define monitoring, periodic reassessment, and material-change requirements for performance, safety, fairness, privacy, security, human oversight, explainability, drift, incidents, and control effectiveness.
- Translate Internal Audit findings and applicable NIST, ISO, Joint Commission, healthcare, legal, privacy, security, and regulatory expectations into prioritized controls, remediation oversight, and readiness evidence.
- Design and operate the cross-functional AI governance service model with explicit inputs, accountable owners, service expectations, decision rights, handoffs, escalation paths, and review cadences across Security, Privacy, Legal, TPRM, business relationship management, Data, Engineering, product teams, and Internal Audit; preserve independent control authorities and ensure delivery teams do not approve their own risk acceptance.
- Build and automate intake, assessment, evidence collection, decision records, monitoring, dashboards, and issue-management mechanisms; measure cycle time, predictability, avoidable rework, control effectiveness, and unresolved risk.
- Lead a high-leverage team that models a build-and-show culture and manage function personnel, budgets, performance, capacity, and development in accordance with enterprise policy.
- Performs other duties as assigned.
Knowledge, Skills, and Abilities: - Deep healthcare experience and knowledge of clinical and operational workflows, patient and consumer risk, regulated data, quality, safety, and accreditation obligations. [Required]
- Expert knowledge of enterprise governance, risk, compliance, assurance, audit, privacy, security, clinical safety, or comparable control disciplines. [Required]
- Working knowledge of predictive, generative, and agentic AI lifecycles, model and data dependencies, monitoring, common failure modes, and responsible-AI practices. [Required]
- Ability to apply NIST, ISO, healthcare regulatory, accreditation, audit, privacy, security, and enterprise-control frameworks to practical operating mechanisms and evidence. [Required]
- Strong independent judgment and ability to distinguish risk ownership, control ownership, governance disposition, remediation accountability, and Internal Audit independence. [Required]
- Ability to design and automate risk tiers, intake and assessment workflows, control requirements, monitoring obligations, exception mechanisms, decision records, service measures, and audit-ready evidence packages. [Required]
- Executive communication, business-value and risk storytelling, committee facilitation, respectful challenge, conflict navigation, issue management, escalation, and active cross-functional influence skills. [Required]
- Hands-on ability to build and automate governance mechanisms using AI-first, first-principles, and lean-management methods while developing a force-multiplier team that produces repeatable controls, faster decisions, and measurable risk outcomes. [Required]
Education: - Bachelor's Degree [Required]
- Master's Degree [Preferred]
Field of Study: - In Healthcare Administration, Law, Compliance, Risk Management, Information Systems, or related field [Required]
Work Experience: - 7+ years of relevant experience [Required]
- 5+ years of leadership experience [Required]
Licenses and Certifications: - Certified Information Systems Auditor (CISA) OR Certified in Risk and Information Systems Control (CRISC) [Preferred]
Physical Requirements: (Please click the link below to view work requirements)
- Physical Requirements - https://tinyurl.com/23km2677
Posting end date: 11/20/26
Pay Range:$147,867.20 - $275,038.40
Background Screening Requirement (Florida Law) Certain positions are subject to
Florida Level 2 background screening, including fingerprinting, as required by state law.
