Senior AI IT Risk

As part of its ongoing digital transformation and the growing adoption of Cloud solutions, Artificial Intelligence (AI) and IT process automation, our client is looking to strengthen its IT risk management, governance and regulatory compliance capabilities. We are seeking a Senior AI IT Risk & Compliance Consultant to support IT, Data, Architecture, Cybersecurity and Digital teams in identifying, assessing and managing the risks associated with AI adoption and emerging technologies. The consultant will contribute to strengthening IT and AI governance, operational resilience, fraud prevention and compliance with applicable European regulations, including the EU AI Act, DORA, GDPR and the Cyber Resilience Act (CRA). 2.

Key Responsibilities
• Strengthen the organisation's IT and AI risk management framework.
• Support business risk assessments and identify operational, cybersecurity, regulatory, contractual and fraud-related risks.
• Assess risks associated with AI models, training data, Large Language Models (LLMs) and third-party AI services.
• Contribute to the design, implementation and continuous improvement of the AI governance framework.
• Ensure alignment with applicable regulatory and compliance requirements.
• Define, coordinate and monitor remediation plans and control improvement initiatives in collaboration with relevant stakeholders.
• Assess risks related to Cloud environments, IT outsourcing and third-party technology providers.
• Advise stakeholders on exit strategies, critical supplier management and regulatory compliance requirements.
• Contribute to the development of risk management dashboards, key risk indicators and compliance monitoring tools.
• Support IT and AI transformation programmes by integrating risk management, compliance, operational resilience and fraud prevention considerations.
• Prepare documentation and provide support for internal audits, external audits and regulatory inspections. 3. Required Experience and Qualifications Professional Experience
• Approximately 10 years of experience in IT Risk Management, IT Governance, Operational Risk or Compliance.
• Proven experience in audit, internal control or risk management.
• Previous experience in the financial services, banking or insurance sector.
• Demonstrated ability to collaborate with multidisciplinary teams, including IT, Architecture, Cybersecurity, Data and Digital.
• Experience working with Cloud environments, outsourced IT services and ICT risk management. Technical and Regulatory Expertise
• Strong understanding of Artificial Intelligence and Generative AI technologies.
• Knowledge of the requirements and implications of the European AI Act.
• Experience identifying and assessing risks related to AI models, LLMs, training data and third-party AI services.
• Good understanding of cybersecurity and operational resilience challenges associated with AI systems.
• Knowledge of DORA, GDPR and the Cyber Resilience Act (CRA).
• Experience with third-party risk management, IT outsourcing and ICT service providers.
• Ability to conduct regulatory impact assessments, maintain risk registers and develop remediation plans and control frameworks.
• Proficiency in Microsoft Office, particularly Word, Excel and PowerPoint. 4. Key Deliverables The consultant will be expected to contribute to the following deliverables:
• AI Risk Management Framework and AI Governance Framework.
• Risk assessments and risk registers for AI solutions.
• Regulatory impact assessments covering the EU AI Act, DORA, GDPR and CRA.
• Remediation plans and control improvement plans.
• Executive dashboards and indicators for risk and compliance monitoring.
• Risk assessments, opinions and recommendations relating to AI solutions, Cloud services and strategic suppliers.
• Documentation and supporting materials for internal audits, external audits and regulatory inspections. 5. Languages
• English: Fluent, mandatory.
• French and/or Dutch: Professional proficiency is an advantage, depending on stakeholder requirements.