Manager of Risk & Trust Operations

About the job

Responsibilities

• Drive the end-to-end lifecycle for risk assessments and certifications supporting the deals pipeline and go-to-market efforts.
• Partner with sales, legal, and product teams to scope and deliver risk assessments tailored to customer requirements.
• Develop and maintain a library of reusable risk assessment artifacts, certifications, and evidence packages.
• Serve as a risk subject matter expert in customer-facing conversations, due diligence requests, and RFP responses.
• Conduct upfront due-diligence assessments, ongoing risk monitoring, and on-demand risk reviews of third parties and vendors.
• Design and operate a scalable third-party risk management program.
• Establish clear criteria for vendor risk tiering, onboarding requirements, and ongoing monitoring cadences.
• Coordinate with procurement, legal, and technology teams to ensure vendor risk findings are reflected in contracting and relationship management.
• Validate and evidence the design and operational efficacy of policies, standards, controls, and guardrails.
• Design and execute controls testing programs that provide reliable, audit-quality evidence of control effectiveness.
• Develop and maintain structured assurance documentation for regulators, auditors, and customers.
• Identify and escalate control design or operational gaps, working cross-functionally to drive remediation.
• Assure the design and operating efficacy of the organization's AI safety program, responsible AI and ethics frameworks.
• Govern the pre-deployment risk review process for new models and major capability updates.
• Develop and maintain pre-deployment review workflows, risk thresholds, escalation paths, and sign-off requirements.
• Provide assurance reporting on the ongoing effectiveness of AI safety controls.
• Own the AI abuse and safety violation response program end-to-end, including detection, triage, investigation, and remediation tracking.
• Maintain the AI incident registry across the model lifecycle.
• Develop and continuously refine detection methodologies, triage protocols, and escalation criteria.
• Partner with product, engineering, legal, and communications teams to coordinate cross-functional responses to high-severity AI safety incidents.
• Analyze incident trends to identify systemic vulnerabilities and recommend improvements to AI safety controls.
• Govern the organization's risk issue management lifecycle, including inventory, escalation protocols, and remediation oversight.
• Establish and enforce clear standards for issue documentation, severity classification, ownership assignment, and remediation timelines.

Requirements

• Ability to translate complex risk concepts into verifiable risk management.
• Ability to influence without direct authority.
• Ability to build trusted relationships internally and externally.