AI Risk & Compliance Specialist

About the role

Co-operative Bank is hiring a full-time, on-site AI Risk & Compliance Specialist in Nairobi. The role assesses AI-related risks, monitors developing AI governance policies and ensures responsible use of artificial intelligence across banking systems. The position is advertised by Corporate Staffing Services.

Key responsibilities

• Implement and maintain the Bank's responsible AI governance framework, policies, standards, controls and approval processes.
• Maintain an enterprise-wide inventory of AI use cases, models, providers and third-party AI tools, with ownership, risk classification, approvals and lifecycle monitoring.
• Conduct AI risk and impact assessments covering data protection, cybersecurity, model risk, bias and fairness, explainability, human oversight, third-party risk and regulatory compliance.
• Establish risk-based control, testing and evidence requirements, including model validation, bias testing, generative AI safeguards and incident management.
• Coordinate independent reviews and approvals with Risk, Legal, Compliance, Data Protection, ICT Security, Model Risk and relevant business control owners.
• Monitor AI risks, control effectiveness, model performance, incidents, complaints and remediation, reporting to management and Board governance forums.
• Support investigations of AI-related incidents and control breaches, and monitor emerging AI regulations and industry developments.
• Promote responsible AI awareness through targeted training and guidance.

Required profile

• Bachelor's degree in Risk Management, Law, Compliance, Information Systems, Data Science, Computer Science, Statistics or a related field.
• At least six years of relevant experience in risk management, compliance, audit, privacy, model risk, technology risk, data governance or AI governance.
• Demonstrated experience designing or implementing governance and control frameworks in a regulated environment.
• Practical exposure to AI/ML risk, model lifecycle controls, data protection and third-party technology risk is an added advantage.
• A relevant postgraduate qualification and professional certification in risk, compliance, privacy, information security, audit, data governance or responsible AI is an added advantage.