AI Governance Engineer – Standards & Controls

Apply
Apply

Share

successfully icon

Successfully

The vacancy has been successfully added to favorites

location icon

Remote United States, United States of America

specialization icon

Information Governance (Platform)

lob icon

BCM Industry

date icon

29/07/2026

Req. VR-124259

Apply
Project description

The AI Governance Engineer is the technical production engine behind the bank's AI standards and controls build-out. Working under the direction of the AI Governance & Controls Lead, this role drafts the standards library, engineers controls as implementable and testable requirements, builds control-to-evidence mappings, and produces the documentation and automation that make governance operational rather than aspirational.

This is a technical governance role, not a policy-writing role alone: the engineer works directly with platform capabilities (gateway policies, entitlements, logging), expresses controls in verifiable terms, contributes to policy-as-code and evidence automation where feasible, and validates that what the standard requires is what the platform enforces.

Responsibilities
bullet icon

Standards & Controls Engineering

bullet icon

Draft and iterate the AI standards library under the Lead's direction: model onboarding and approval, oversight tiers, logging/retention, agentic guardrails, data-classification handling, and acceptable use.

bullet icon

Engineer each control as a testable requirement: definition, enforcement point, owner, evidence artifact, and validation method.

bullet icon

Build and maintain obligation-to-control-to-evidence mappings against regulatory guidance and internal policy.

bullet icon

Contribute to policy-as-code and controls-automation approaches with the platform team where controls can be enforced or checked mechanically.

bullet icon

Evidence & Assessment Production

bullet icon

Produce evidence artifacts, control attestations, and assessment documentation for deviations, exceptions, and governance reviews.

bullet icon

Validate platform-generated evidence (audit logs, entitlement records, quota enforcement) against control requirements; document gaps and drive fixes.

bullet icon

Support deviation and exception lifecycle management: drafting, compensating-control documentation, tracking, and closure evidence.

bullet icon

Assemble components of examiner-readiness and audit-response packages.

bullet icon

Governance Operations Support

bullet icon

Support AI Control Group, working group, and committee operations with prepared materials, assessments, and documented decisions.

bullet icon

Maintain the AI use case and agent registry data quality in partnership with intake and platform onboarding.

bullet icon

Document governance processes, runbooks, and templates in bank repositories for FTE handover.

bullet icon

Transfer working knowledge to bank FTEs throughout the engagement.

Skills

Must have

bullet icon

Minimum of 5 years' experience in technology governance, IT risk/controls, security governance engineering, or compliance engineering in a technology environment.

bullet icon

Demonstrated experience writing technical standards, control frameworks, or control documentation that maps to regulatory or policy obligations.

bullet icon

Working technical knowledge of cloud platforms and modern application patterns: APIs and gateways, identity/RBAC, logging and monitoring, environment separation.

bullet icon

Familiarity with AI/GenAI systems sufficient to write accurate, enforceable requirements for model access, oversight, and logging.

bullet icon

Strong technical writing and documentation discipline; able to produce artifacts that survive audit and second-line challenge.

bullet icon

Experience with GRC processes: exceptions, findings, evidence collection, and remediation tracking.

Nice to have

bullet icon

Financial services or other highly regulated industry experience; familiarity with model risk management concepts.

bullet icon

Experience with policy-as-code, compliance automation, or controls testing automation.

bullet icon

Familiarity with NIST AI RMF, SR 11-7/SR 26-2 lineage, or comparable AI governance frameworks.

bullet icon

Azure experience (APIM, Entra ID, Azure Monitor, Key Vault)

Other
seniority icon

Languages

English: C1 Advanced

seniority icon

Seniority

Senior

Remote United States, United States of America

Req. VR-124259

Information Governance (Platform)

BCM Industry

29/07/2026

Req. VR-124259

Apply for AI Governance Engineer – Standards & Controls in Remote United States

*Indicates a required field

Under the terms of your specific consent or to perform our obligations under a contract with you, as applicable, we, Luxoft Holding Inc. will manually and electronically process your personal data, specifically your first name, last name, phone number, e-mail address and other data you provide us through this form.


Within this context, we process personal data only for the specific purpose(s) indicated in the individual consent language or other notices provided below.


We will – insofar as reasonably necessary for the purpose you have agreed to and within the scope of applicable laws – transfer your personal data to other entities within the Luxoft Group and to the group of third party recipients listed in our Privacy Notice. Such Recipients can be located outside the European Union (EU) and/or the European Economic Area (EEA) (“Third Countries”). The Third Countries concerned, e.g. the USA, may not have the level of data protection that you enjoy e.g. under the GDPR. This can result in disadvantages such as an impeded enforcement of data subjects’ rights, a lack of control over further processing and access by state authorities. You may only have limited legal remedies against this. Insofar our transfer of your personal data to recipients in Third Countries is not covered by an adequacy decision of the EU Commission, we achieve an adequate level of data protection as further detailed out in our Privacy Notice.


With your consent, we personalise marketing communications to you by way of carrying out marketing research analysis, analysing the surfing-behaviour of our website visitors and to adjust it to their detected tendencies, as well as to plan more efficient future marketing activities. This personalised marketing does not include any automated decision-making activities.


Further information on how we process personal data in general is available in our Privacy Notice. You may withdraw any given consent at any time. The withdrawal of your consent(s) will not affect the lawfulness of processing before its withdrawal. For any request in this context, please e-mail us at: DPO@luxoft.com.


Before uploading CV or any other information to this website, to learn more about your obligations and restrictions arising from the use of this website, please read our Terms of Use.