Note: The job is a remote job and is open to candidates in USA. CareFirst BlueCross BlueShield is seeking an AI Governance Coordinator to support the operationalization of its enterprise AI governance program. The role manages the AI use case registry, performs risk assessment coordination, tracks mitigation activities, supports governance platform operations, and prepares audit- and regulatory-ready documentation.
Responsibilities
- Maintain the AI use case registry as the system of record for lifecycle stage, risk tiering, ownership, and value categories
- Review and validate risk ratings for active and pending AI use cases; adjust ratings as needed based on updated context, control posture, or governance criteria
- Issue and collect supplemental questionnaires for high- and medium-risk use cases; ensure responses are complete, accurate, and stored for audit readiness
- Track and follow up on mitigation actions for high- and medium-risk use cases through to formal close-out
- Coordinate periodic reviews of registered use cases to ensure risk ratings and mitigations remain current
- Support the implementation, migration, and ongoing operation of the AI governance platform — including data validation, intake workflow testing, and user onboarding
- Operate the AI use case intake process — triaging new submissions, routing to appropriate reviewers, and ensuring timely risk scoring and disposition
- Continuously improve governance processes as the program matures from manual to software-enabled operations
- Manage assigned items from internal and third-party assessment project plans, including follow-ups with action owners, status tracking, and escalation of delays
- Draft guardrail documents, process flows, and supporting documentation required to close identified gaps
- Track and document mitigation activities, evidence collection, and final close-out for each assigned item
- Partner with control function teams (Risk, Compliance, Privacy, Information Security) to ensure AI governance activities align with enterprise control frameworks
- Draft communications, mitigation plans, follow-up correspondence, and governance reporting on behalf of the AI Governance Lead
- Support audit and regulatory inquiries by preparing factual, audit-ready documentation and evidence packages
Skills
- • Bachelor's degree in Business, Information Systems, Risk Management, or a related field; equivalent experience considered
- • 3–5 years of experience as a business analyst, governance analyst, or risk/compliance analyst in a regulated industry
- • 1-2 years Direct AI governance or AI risk management experience required. This includes AI use case review, risk assessment, working with business user on AI risk mitigation, managing AI use case inventory
- • Demonstrated experience in a review and challenge role such as third-party risk assessments, information security assessments, risk and control self-assessments (RCSAs), or privacy risk assessments
- • Strong communication and collaboration skills, with proven experience working alongside control function partners (Risk, Compliance, Privacy, Information Security)
- • Excellent writing skills — able to draft clear, audit-ready communications, mitigation plans, follow-ups, and process documentation
- • Strong organizational skills with the ability to manage multiple workstreams, deadlines, and stakeholders concurrently
- • Curiosity, initiative and willingness to learn/ research about new AI tools and associated risks
- • AI Governance certifications and training
- • Familiarity with AI governance frameworks (NIST AI RMF, ISO 42001) and healthcare claims regulatory requirements (HIPAA, CMS)
- • Experience with governance, risk, and compliance (GRC) tooling
- • Experience supporting audit, regulator, or third-party assurance engagements
- • Healthcare payer or other highly regulated industry experience preferred
Benefits
- Remote work
Company Overview
Company H1B Sponsorship