The AI Governance Coordinator supports the AI Governance Lead in operationalizing the enterprise AI governance program - managing the use case registry, executing risk assessments, coordinating mitigation follow-ups, and supporting audit and regulatory readiness. This role is the operational engine of the governance function, ensuring that AI use cases are properly intake, risk-rated, documented, and tracked through their lifecycle. The Coordinator will play a central role in supporting the AI governance platform and executing gap closure activities identified through internal and third-party assessments.

Key Responsibilities
(1) Use Case Registry Management
- Maintain the AI use case registry as the system of record for lifecycle stage, risk tiering, ownership, and value categories.
- Review and validate risk ratings for active and pending AI use cases; adjust ratings as needed based on updated context, control posture, or governance criteria.
- Issue and collect supplemental questionnaires for high- and medium-risk use cases; ensure responses are complete, accurate, and stored for audit readiness.
- Track and follow up on mitigation actions for high- and medium-risk use cases through to formal close-out.
- Coordinate periodic reviews of registered use cases to ensure risk ratings and mitigations remain current.
(2) Governance Platform & Intake Operations
- Support the implementation, migration, and ongoing operation of the AI governance platform - including data validation, intake workflow testing, and user onboarding.
- Operate the AI use case intake process - triaging new submissions, routing to appropriate reviewers, and ensuring timely risk scoring and disposition.
- Continuously improve governance processes as the program matures from manual to software-enabled operations.
(3) Gap Closure & Mitigation Coordination
- Manage assigned items from internal and third-party assessment project plans, including follow-ups with action owners, status tracking, and escalation of delays.
- Draft guardrail documents, process flows, and supporting documentation required to close identified gaps.
- Track and document mitigation activities, evidence collection, and final close-out for each assigned item.
(4) Stakeholder Engagement & Communication
- Partner with control function teams (Risk, Compliance, Privacy, Information Security) to ensure AI governance activities align with enterprise control frameworks.
- Draft communications, mitigation plans, follow-up correspondence, and governance reporting on behalf of the AI Governance Lead.
- Support audit and regulatory inquiries by preparing factual, audit-ready documentation and evidence packages.

Required Skills

Required Qualifications
- Bachelor's degree in Business, Information Systems, Risk Management, or a related field; equivalent experience considered.
- 3-5 years of experience as a business analyst, governance analyst, or risk/compliance analyst in a regulated industry.
- Demonstrated experience reviewing and supporting one or more of the following: AI use cases, risk assessments, incident reporting, third-party risk assessments, information security assessments, risk and control self-assessments (RCSAs), or privacy risk assessments.
- Strong communication and collaboration skills, with proven experience working alongside control function partners (Risk, Compliance, Privacy, Information Security).
- Excellent writing skills - able to draft clear, audit-ready communications, mitigation plans, follow-ups, and process documentation.
- Strong organizational skills with the ability to manage multiple workstreams, deadlines, and stakeholders concurrently.

Preferred Qualifications
- Direct AI governance or AI risk management experience highly desirable.
- Familiarity with AI governance frameworks (NIST AI RMF, ISO 42001) and healthcare regulatory requirements (HIPAA, CMS).
- Experience with governance, risk, and compliance (GRC) tooling - AI governance platform experience (e.g., AlignmtAI) a strong plus.
- Healthcare payer or other highly regulated industry experience preferred.
- Experience supporting audit, regulator, or third-party assurance engagements.