Director, Generative AI Risk Management

Location:
127 Public Square, Cleveland Ohio

JOB TITLE: Director, Enterprise AI Risk Management

Job Summary

The Director, Enterprise AI Risk Management role has overall responsibility to provide oversight, monitoring and effective review and challenge of the business activities that may expose KeyCorp and its affiliates to operational, regulatory, and/or other risks associated with its implementation of Generative AI and related technologies. This position will be responsible for developing and maturing the Enterprise AI Risk Oversight program, engaging a broad team of risk professionals. The position has responsibility for oversight of AI risk programs and policies, which includes providing highly specialized guidance and oversight on current and emerging legal, regulatory, and enterprise risk issues, monitoring and measuring risk performance, and reviewing and challenging of AI strategy, initiatives, products, control design, implementation, testing, and remediation. This leader promotes an organizational culture that encourages collaboration, acknowledgement and recognition of risks associated with AI implementation across all risk types including Model Risk, Compliance Risk, and Operational Risk and places a high priority on risk management. Works with the LOB to develop an assessment, testing and remediation process for the AI risk management program. This role reports directly to a Senior Director in Enterprise Risk Management.

Responsibilities

• Lead in the development and maturation of risk policies, program, and processes for generative artificial intelligence (AI) development and deployment. Assist in developing an enterprise-wide approach to AI risk management, which focuses on educating line of business partners and identifying, measuring, mitigating, monitoring and reporting AI risks.
• Monitors compliance with AI risk policies and standards by working with the LOB to integrate AI risk control self-testing into a comprehensive control self-testing program that performs regular and comprehensive risk assessment and testing, identifies gaps and deficiencies, and formulates response strategies for corrective action.
• Proactively advises front line business units on applicable AI risk standards, including keeping up-to-date with developments in the applicable laws, rules, standards and industry practices.
• Proactively works with business unit management and all risk disciplines to identify and assess the risks associated with AI deployment activities.
• Ensures a sound understanding of AI strategy, business processes and associated risks for AI deployment.
• Develops and recommends for approval policies, standards, procedures and guidelines to comply with corporate risk appetites, tolerances and policies.
• Conducts review and challenge activities and escalation, including independent testing as required.
• Proactively evaluates AI risk reporting (metrics, loss events, findings, remediation plans, etc.), internal and external research, including leveraging peer benchmarks to identify current and emerging risk issues and develop effective response strategies to address identified risks/gaps.
• Play a primary role in the design, development and maintenance of the AI risk assessments, testing and remediation and reporting program.
• Assesses the appropriateness of and works with assigned LOBs where warranted on developing and/or enhancing internal procedures and guidelines to comply with corporate risk appetite, tolerances and policies.
• Present AI risk reports (Enterprise-wide and LOB specific) to Senior Management and Risk Committees.
• Develop and implement communication plans around AI risk responsibilities, assessments, testing, remediation and reporting to increase risk and control awareness.
• Maintain constructive interaction with regulators.
• Act as liaison with regulators and other internal or external auditors on matters concerning the corporation's AI risk program. Organize and monitor interaction between the 1st Line of Defense and regulators
• Coordinate reporting to regulators and review final responses to external examinations, requests for information a regulatory and legal inquiries
• Works closely with executives of other major risk category executives (e.g., Credit, Compliance, Market, Model, Reputation, and Strategic) and 1st LOD to ensure an effective AI risk culture.
• Coordinate and collaborate with Internal Audit on AI risk assessments.
• Escalates promptly to appropriate senior management or appropriate risk committee any material breaches of applicable laws, rules, policies or standards with actual or potential AI risk impact, and necessary correction action.
• Effectively manages assigned human capital, ensuring acceptable employee engagement levels, providing sound direction, active coaching and development, and performance management of assigned employees.
• Represents Key in the community/industry though leadership involvement.
• Participate in periodic assignments related to the constantly changing risk management environment.
• Performs other duties as assigned; duties, responsibilities and/or activities may change or new ones may be assigned at any time with or without notice
• Complies with all KeyBank policies and procedures, including without limitation, acting professionally at all times, conducting business ethically, avoiding conflicts of interest, and acting in the best interests of Key's clients and Key.

EDUCATION QUALIFICATIONS

• Bachelor's Degree Required or equivalent years of experience
• Master's Degree Business, finance, risk, Juris Doctor or other post graduate degree (preferred)

EXPERIENCE QUALIFICATIONS

• A minimum of 10 years Work experience in a financial services risk management, audit, accounting or related role (required)
• A minimum of 5 years Management experience (required)
• Broad knowledge and understanding of risks and controls (required)
• Extensive knowledge and subject matter expertise in managing specified risk in an institutional setting including the related rules and regulations of the financial services industry to include applicable Interagency Guidance or OCC, FRB, state law and other pertinent regulations. (required)
• In-depth practical knowledge of internal controls, risk assessments and operational and compliance processes, and applicable techniques for implementation of regulatory, compliance and legal requirements and operational processes. (required)
• Strong leadership and relationship management skills including the ability to lead up and across the organization (required)
• Strong project management and/or continuous improvement skills (required)

TACTICAL SKILLS

• Strong leadership and organizational skills
• Ability to work closely with a diverse/cross functional group and influence their behavior to achieve desired results.
• Strong conflict resolution skills
• Strong negotiation and influencing skills
• Experience with managing enterprise level projects involving multiple stakeholders
• Very detail oriented and strong documentation skills
• Ability to multi-task and work in a fast paced, changing environment
• Strong communications and interpersonal skills
• Excellent time management skills and strong organizational skills with the ability to set priorities
• Proven track record of integrity ethics, judgment, and maturity.
• Has a passion for emerging technologies, the business and the overall success of the bank
• Strong results orientation
• Ability to link business goals with risk strategies
• Ability to assertively and tactfully present strong arguments backed with detailed analytical support; can highlight the "whys' behind decisions.
• Strong executive presence and self-confidence to make effective presentations at various levels within the organization.

PERSONAL SKILLS

• Critical Thinking
• Decision Making
• Influence
• Problem Solving
• Agile Mindset

PRACTICAL SKILLS

• Business Acumen
• Risk Management
• Oral & Written Communication
• Data Analysis
• Analytical Thinking

COMPENSATION AND BENEFITS
This position is eligible to earn a base salary in the range of $123,000.00 - $257,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

Please click here for a list of benefits for which this position is eligible.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

Job Posting Expiration Date: 01/19/2026KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing

#LI-Remote