AI Governance, Risk & Assurance Consultant

This role is based in the City and it's 4-days per week in the office

To be considered for this role,you must alreadybe eligible to work in the United Kingdom.

We offer AI governance, AI risk management and AI audit across traditional machine learning, generative AI and agentic AI, built around a Govern, Map, Measure, Manage approach at enterprise, portfolio, use-case and runtime level. We need an experienced consultant in the UK. You will work across all three areas, lead client engagements with limited supervision from scoping to final report and move between advisory work and independent assurance as client needs require.

As part of your duties, you will be responsible for:

• Deliver AI governance engagements: maturity assessments, AI risk appetite, taxonomy and policy, operating models (roles across the three lines, forums, decision rights, escalation), integration with enterprise risk, model risk, data, cyber and privacy, and ISO/IEC 42001 readiness.
• RunAI estate discovery (including shadow AI), use-case classification and risk tiering, regulatory mapping and a portfolio view, ending in a prioritised roadmap.
• Assess AI risk at use-case level,inherent and residual,covering customer and conduct harm, data and privacy, model and output, security and operational risk, across machine learning, generative AI and agentic AI.
• Design proportionate controls and guardrails, human oversight and approval workflows, and give a clear recommendation (go, conditional go, redesign or stop).
• Set up monitoring for live AI, with key risk indicators, incident handling and reassessment on material change, and support clients running it day to day.
• Plan and carry out independent AI audits, eithera governance auditacross the organisation and its AI portfolio or a deep audit of selected use cases, including support to internal audit teams.
• Test controlsover models, data and technology, including model performance and validation, data quality, lineage and privacy; coordinate specialist testing such as red teaming, where needed.
• Track AI regulation and standards (FCA and PRA expectations, EU AI Act, ISO 42001,NIST AI RMF, UK GDPR) and turn them into practical client requirements.
• Document findings, agree actionswith management, and lead workshops and steering committees, influencing senior leaders with executive-ready reports.
• Manage delivery: plan the work, review the work of others, controlquality, timelines and engagement finances, and coach analysts, including colleagues in India.

Qualifications and experience we consider to be essential for the role:

• Up to 7 years in technology risk, internal audit, model risk or GRC, in a consultancy (preferred) or in-house at a regulated or large organisation.
• Hands-on delivery of AI governance, AI risk or AI assurance work, or closelyrelated model risk or technology risk work with practical AI exposure.
• Experience reviewing, validating or testing traditional and AI-driven models,and assessing model performance and risk outcomes.
• Good understanding of AI platforms, architectures and governance frameworks, and the technology and operational risks across the AI lifecycle, including generative and agentic AI.
• Experience assessing data governance, data quality, lineageand privacy controls,with working knowledge of ISO/IEC 42001, NIST AI RMF, the EU AI Act, UK GDPR and UK regulatory expectations for AI.
• Experience scoping AI auditsand assessments, designing and testing controls, and writing audit-quality findings and reports.
• Confident communicator who can influencesenior stakeholders, explaincomplex topics clearly, lead an engagement independently and coach others.
• Degree in a relevant subject,and the right to work in the UK.

Skills and Personal attributes we would like to have:

• Professional certifications such as AIGP, CISA, CISM, CRISC, AAIA, AAIR, AAISM, or ISO 42001/ISO27001 Lead Auditor or Implementer.
• Exposure to third-party AI risk; experience in a regulatedsector; insurance stronglypreferred.
• Data literacy (for example Python, SQL or Power BI) and familiarity with leading GRC and AI governance tools.

#J-18808-Ljbffr