AI Governance Coordinator

Role Summary: The AI Governance Coordinator supports the AI Governance Lead in operationalizing the enterprise AI governance program - managing the use case registry, executing risk assessments, coordinating mitigation follow-ups, and supporting audit and regulatory readiness. This role is the operational engine of the governance function, ensuring that AI use cases are properly intake, risk-rated, documented, and tracked through their lifecycle. The Coordinator will play a central role in supporting the AI governance platform and executing gap closure activities identified through internal and third-party assessments.

Key Responsibilities
Use Case Registry Management
 Maintain the AI use case registry as the system of record for lifecycle stage, risk tiering, ownership, and value categories.
 Review and validate risk ratings for active and pending AI use cases; adjust ratings as needed based on updated context, control posture, or governance criteria.
 Issue and collect supplemental questionnaires for high- and medium-risk use cases; ensure responses are complete, accurate, and stored for audit readiness.
 Track and follow up on mitigation actions for high- and medium-risk use cases through to formal close-out.
 Coordinate periodic reviews of registered use cases to ensure risk ratings and mitigations remain current.

Governance Platform & Intake Operations
 Support the implementation, migration, and ongoing operation of the AI governance platform - including data validation, intake workflow testing, and user onboarding.
 Operate the AI use case intake process - triaging new submissions, routing to appropriate reviewers, and ensuring timely risk scoring and disposition.
 Continuously improve governance processes as the program matures from manual to software-enabled operations.

Gap Closure & Mitigation Coordination
 Manage assigned items from internal and third-party assessment project plans, including follow-ups with action owners, status tracking, and escalation of delays.
 Draft guardrail documents, process flows, and supporting documentation required to close identified gaps.
 Track and document mitigation activities, evidence collection, and final close-out for each assigned item.

Stakeholder Engagement & Communication
 Partner with control function teams (Risk, Compliance, Privacy, Information Security) to ensure AI governance activities align with enterprise control frameworks.
 Draft communications, mitigation plans, follow-up correspondence, and governance reporting on behalf of the AI Governance Lead.
 Support audit and regulatory inquiries by preparing factual, audit-ready documentation and evidence packages.

Required Qualifications
 Bachelor's degree in Business, Information Systems, Risk Management, or a related field; equivalent experience considered.
 3-5 years of experience as a business analyst, governance analyst, or risk/compliance analyst in a regulated industry.
 Demonstrated experience reviewing and supporting one or more of the following: AI use cases, risk assessments, incident reporting, third-party risk assessments, information security assessments, risk and control self-assessments (RCSAs), or privacy risk assessments.
 Strong communication and collaboration skills, with proven experience working alongside control function partners (Risk, Compliance, Privacy, Information Security).
 Excellent writing skills - able to draft clear, audit-ready communications, mitigation plans, follow-ups, and process documentation.
 Strong organizational skills with the ability to manage multiple workstreams, deadlines, and stakeholders concurrently.

Preferred Qualifications
 Direct AI governance or AI risk management experience highly desirable.
 Familiarity with AI governance frameworks (NIST AI RMF, ISO 42001) and healthcare regulatory requirements (HIPAA, CMS).
 Experience with governance, risk, and compliance (GRC) tooling - AI governance platform experience (e.g., AlignmtAI) a strong plus.
 Healthcare payer or other highly regulated industry experience preferred.
 Experience supporting audit, regulator, or third-party assurance engagements.