Governance, Risk and Compliance (GRC) AI Engineer

Overview

Hands-on technical role within the Governance, Risk and Compliance team, responsible for engineering, configuring, integrating and operating the technology that supports the Enterprise AI Governance Framework. Reports to the Senior Director of GRC.

What you'll do

• Translate the Enterprise AI Governance Framework, policies, standards, risk criteria and approval requirements into technical configurations, automated workflows, control checks, monitoring and evidence.
• Configure and maintain applicable Microsoft Purview capabilities supporting AI and data governance, including data classification, sensitivity labels, data loss prevention, information protection, retention, audit, data cataloging and compliance monitoring.
• Evaluate, configure, integrate and support approved AI governance and security technologies to discover AI use, protect enterprise data, assess risk, enforce requirements and monitor ongoing compliance.
• Partner with GRC, security architects, engineering teams, Privacy, Legal and business owners to design preventive and detective controls for AI solutions, including access, data use, model lifecycle, human oversight, logging, third-party use and exception management.
• Implement and maintain technical processes supporting the inventory, classification, review, approval and traceability of AI systems, models, agents, use cases, data sources, owners, vendors and material changes.
• Build and maintain workflows, templates, rules and data connections supporting AI impact assessments, security reviews, privacy reviews, third-party assessments, control attestations and risk acceptance.
• Work with data and security teams to identify sensitive information used by AI solutions and implement classification, access, sharing, retention, monitoring and loss-prevention controls.
• Develop and execute test plans to confirm AI governance controls and configurations work as intended; document results, resolve defects, validate remediation and maintain audit-ready evidence.
• Establish operational monitoring for control failures, policy violations, unauthorized AI use, data exposure and configuration drift; investigate alerts and coordinate timely corrective action.
• Use approved scripting, application programming interfaces, connectors, workflow tools and low-code capabilities to reduce manual effort and connect AI governance processes with enterprise systems of record.
• Maintain reliable data and dashboards covering AI inventory, review status, risk ratings, control coverage, exceptions, incidents, remediation, adoption and overdue actions.
• Provide concise, accurate status updates to the AI team, Office of the CISO, DFS and GRC leadership, identifying progress, milestones, risks, dependencies, technical decisions and required actions.
• Maintain architecture diagrams, configuration standards, runbooks, procedures, data flows, control mappings, test records, change history and support documentation for AI governance technologies.
• Monitor Microsoft and other technology roadmaps, assess new AI governance capabilities, and plan upgrades and configuration changes so solutions remain supportable, secure and aligned with enterprise requirements.
• Serve as a technical bridge among GRC, the enterprise AI team, security engineering, data governance, Information Technology, Privacy, Legal, Quality, DFS and business teams.

What you'll need

• Bachelor's degree in cybersecurity, information technology, computer science, data science, engineering, risk management or a related field, or an equivalent combination of education, certification and directly relevant experience.
• Five or more years of progressive experience in cybersecurity, security engineering, data governance, GRC technology, cloud security or a related technical discipline, including hands-on responsibility for enterprise security or compliance platforms.
• Demonstrated experience configuring and administering Microsoft Purview capabilities such as Information Protection, Data Loss Prevention, Audit, Data Lifecycle Management, Records Management, Compliance Manager, or Data Map and Data Catalog.
• Practical experience supporting AI, machine learning, generative AI, copilots, agents or related technologies in an enterprise environment, with understanding of associated security, privacy, data, compliance and operational risks.
• Experience translating governance or control requirements into technical configurations, workflows, integrations, monitoring, test procedures and evidence.
• Working knowledge of Microsoft cloud, identity, security and automation capabilities.
• Ability to use scripting, application programming interfaces, data queries or workflow automation to integrate systems and improve governance processes.
• Knowledge of cybersecurity, privacy, data governance and AI risk frameworks and standards, such as the NIST AI Risk Management Framework, ISO/IEC 42001, NIST Cybersecurity Framework, ISO 27001, or comparable requirements.
• Strong written, verbal and presentation skills, including preparing technical documentation, dashboards, status reports and decision materials for the AI team, Office of the CISO, DFS, auditors and leadership.

Nice to have

• Working in a clinical research organization, life sciences, healthcare, pharmaceutical or other regulated environment (strongly preferred).
• Experience with Microsoft Azure, Microsoft Entra, Microsoft Defender, Microsoft 365, Power Platform or Microsoft Sentinel.
• Experience with PowerShell, Python, KQL, REST APIs or equivalent technologies.
• Relevant Microsoft credentials and certifications in security, compliance, privacy, Azure or AI.
• Security or governance certifications such as CISSP, CISM, CRISC, CGRC or equivalent.

Details

• Location: New Delhi, India.