Head of AI Governance

What do we need

We are seeking a technically credible, collaborative Head of AI Governance to provide strategic leadership and oversight of Dotmatics' AI governance program. This role ensures the responsible, compliant, and business-aligned use of AI technologies across the organization, covering governance frameworks, risk management processes, and compliance controls that support our delivery of high-quality scientific informatics software.

Reporting to the VP, Information Security, you will serve as the central cross-functional connector across HR, Information Security, Product, Engineering, Legal, Privacy, Quality, and other functions; ensuring AI governance is embedded consistently throughout the organization rather than siloed within a single team. A central aspect of this role is interfacing with Siemens AI Governance colleagues to build and mature a joint AI governance consortium, sharing best practices, frameworks, and emerging standards across the broader Siemens portfolio.

You are a seasoned governance operator with deep technical credibility, adept at navigating complex stakeholder environments and translating AI risk concepts into business language that resonates at the executive level.

In this role you will get to:

• Lead the development and ongoing improvement of a comprehensive AI Governance Framework aligned with Dotmatics' risk appetite and regulatory obligations, including the EU AI Act, ISO 42001, and NIST AI RMF
• Maintain an AI use case registry, establish risk tiering and oversight levels for AI systems, and provide subject matter expertise to evaluate AI tools, models, and applications proposed by business and product teams
• Partner with leadership and functional teams to assess AI use cases across model behaviour, data usage, privacy, and operational risk; ensuring alignment with the company's ISO/IEC 27001 ISMS, ISO 9001 QMS, and GxP requirements
• Serve as program lead for the Dotmatics AI Governance Council, coordinating agendas, workflows, and decision-ready materials for Council and executive review
• Act as the primary Dotmatics liaison to the Siemens AI Governance Consortium, representing the company in cross-portfolio working groups and contributing to joint frameworks and maturity models
• Provide AI governance responses to customer RFIs, security questionnaires, and due diligence inquiries
• Embed governance checkpoints into the SDLC alongside Product and Engineering; align AI controls with the broader security posture and incident response procedures
• Lead the creation and maintenance of AI governance policies, SOPs, and supporting documentation; and develop and deliver AI governance training across the organization
• Produce management reporting, metrics, and dashboards to keep senior leadership informed of program status, risk exposure, and control effectiveness
• Drive continuous improvement by incorporating lessons learned, evolving standards, and regulatory developments

We are looking for people who have a Bachelor's degree in Computer Science, Information Systems, Risk Management, Engineering, Business, or a related discipline (or equivalent experience), combined with 15-20 years in information security, technology risk management, data governance, or compliance in a regulated industry, including 5-8 years of progressive experience specifically in AI/ML governance. Experience in the Life Sciences (GxP) sector and knowledge of the scientific informatics or cheminformatics space is a strong advantage.

The key skills we are looking for:

• Demonstrated experience designing or operating AI governance programs, model risk management frameworks, or technology risk management processes
• Deep understanding of the AI risk landscape, including generative AI, large language models, AI agents, and associated regulatory expectations
• Working knowledge of global AI and privacy regulatory frameworks, including the EU AI Act, GDPR, NIST AI RMF, and ISO/IEC 42001
• Proven ability to work across and influence cross-functional stakeholder groups, including HR, Product, Engineering, Legal, Compliance, Finance, and Executive leadership, without direct line authority
• Experience managing or contributing to governance councils, steering committees, or similar oversight bodies
• In-depth knowledge of AI/ML technologies, including large language models, AI-enabled applications, APIs, and data pipelines, sufficient to assess technical feasibility and risk
• Implementation-level understanding of information security principles, data privacy controls, and life science compliance frameworks (e.g., ISO 27001, NIST 800-53, ISO 9001, GxP, GDPR, CCPA)
• Strong project management discipline with a track record of building programs and processes from the ground up
• Excellent written and verbal communication skills, including the ability to prepare executive-ready materials and governance documentation
• Relevant professional certifications desirable: AIGP, CIPP, CISM, CRISC, or equivalent