AI Risk & Governance Manager

Role Purpose
Establish and lead governance for AI-enabled capabilities across National Cybersecurity Command Centre (NC3) so that AI systems are secure, responsible, explainable, properly controlled and aligned with operational objectives. The role also coordinates security compliance, vulnerability governance, audits and risk-register management in accordance with IM8 or ISO-27001 related requirements and applicable AI governance principles.

Roles and Responsibilities

• Develop and maintain the AI governance framework, policies, standards, decision rights, lifecycle controls and assurance requirements for the acquisition, development, deployment and operation of AI-enabled capabilities.
• Establish an inventory and risk classification of AI use cases, models, data sources, owners, vendors and dependencies, with governance requirements proportionate to operational and security risks.
• Conduct or coordinate AI risk and impact assessments covering data quality, privacy, security, explainability, robustness, human oversight, misuse, bias, model drift and operational failure modes.
• Define governance gates and evidence requirements across the AI lifecycle, including use-case approval, data readiness, model validation, security testing, deployment, monitoring, change management and retirement.
• Work with product managers, engineers, data teams, cybersecurity teams and operational users to translate policy requirements into practical controls, acceptance criteria, standard operating procedures and monitoring measures.
• Define monitoring and reporting for AI performance, data and model drift, anomalous behaviour, overrides, exceptions, incidents and control effectiveness; ensure material issues are investigated and remediated.
• Coordinate security compliance reviews, vulnerability governance, audits and assurance activities in accordance with IM8, GovTech requirements and other applicable policies and standards.
• Maintain the risk register, control exceptions, remediation plans and management reporting, ensuring clear ownership, due dates, evidence and escalation of overdue or high-risk items.
• Review third-party AI solutions and contractual deliverables for governance, security, data-handling, transparency, intellectual-property, support and exit-management considerations.
• Provide secretariat and advisory support to governance forums, prepare decision papers and risk briefings, and build awareness among stakeholders on responsible and secure AI adoption.

Note: This is a contract role until 31 March 2029, with the possibility of renewal based on performance and operational needs at that time.

Working Location : Punggol Digital District (PDD)

Requirements

• Relevant studies in Computer Science, Data Science, Artificial Intelligence, Cybersecurity, Information Systems, Risk Management or a related discipline.
• At least 8 years of relevant experience in technology governance, cybersecurity, risk, compliance, audit, data governance or AI, including experience leading cross-functional governance initiatives.
• Strong understanding of AI and machine-learning lifecycles, data dependencies, model risks, human oversight, explainability, robustness, monitoring and third-party AI risks.
• Experience developing governance frameworks, policies, control standards, risk assessments, audit evidence, management reporting and remediation plans.
• Good knowledge of cybersecurity, vulnerability management, privacy, data governance and technology risk; familiarity with IM8 and GovTech requirements or ISO27001 related requirements is preferred.
• Familiarity with recognised AI risk or governance frameworks and standards, such as the NIST AI Risk Management Framework and ISO/IEC 42001, is advantageous.
• Ability to balance governance, security and operational needs and translate complex requirements into proportionate, implementable controls.
• Strong stakeholder-management, analytical, facilitation, writing and presentation skills, with confidence engaging senior management, technical teams, operational users, auditors and vendors.
• Relevant certifications in AI governance, cybersecurity, risk, audit, privacy or project management are advantageous.

By submitting your application, you agree that your personal data may be collected, used and disclosed by Assurity Trusted Solutions Pte. Ltd. (ATS), GovTech and their service providers and agents in accordance with ATS’s privacy statement which can be found at: https://www.assurity.sg/or such other successor sit

Benefits

• We promote a learning culture and encourage you to grow and learn.
• Annual Leave Benefits with additional perks such as Family Care and Birthday Leave.
• Working in a collaborative environment with helpful team members
• Contract staff enjoys the same benefits as a permanent staff