Director of Responsible AI Governance and Risk

Our promise to you:

Joining AdventHealth is about being part of something bigger. It’s about belonging to a community that believes in the wholeness of each person, and serves to uplift others in body, mind and spirit. AdventHealth is a place where you can thrive professionally, and grow spiritually, by Extending the Healing Ministry of Christ. Where you will be valued for who you are and the unique experiences you bring to our purpose-minded team. All while understanding that together we are even better.

Leads the enterprise control system and cross-functional governance operating model for artificial intelligence across use cases and internal models. The role maintains the AI inventory and risk-tiering model, directs lifecycle assessment and monitoring, translates healthcare, audit, NIST, ISO, accreditation, and regulatory expectations into operating controls, and produces timely, auditable decisions and readiness evidence. Within delegated authority, the Director may condition, pause, or reject AI use when evidence indicates unacceptable risk and personally builds and automates governance mechanisms while preserving the authorities of risk owners and independent control functions.

• Establish and continuously improve the enterprise responsible-AI framework, policies, standards, risk taxonomy, decision rights, lifecycle controls, and assurance model.
• Maintain an authoritative inventory of AI systems and use cases and define proportionate risk tiers, review paths, evidence requirements, monitoring obligations, material-change triggers, and retirement criteria.
• Lead risk assessments for proposed and operating AI use cases and internal models and document residual risk, required controls, owners, conditions, exceptions, monitoring, and decision rationale.
• Exercise delegated authority to condition, pause, or reject AI use when documented evidence indicates unacceptable risk or required controls are not operating effectively.
• Define monitoring, periodic reassessment, and material-change requirements for performance, safety, fairness, privacy, security, human oversight, explainability, drift, incidents, and control effectiveness.
• Translate Internal Audit findings and applicable NIST, ISO, Joint Commission, healthcare, legal, privacy, security, and regulatory expectations into prioritized controls, remediation oversight, and readiness evidence.
• Design and operate the cross-functional AI governance service model with explicit inputs, accountable owners, service expectations, decision rights, handoffs, escalation paths, and review cadences across Security, Privacy, Legal, TPRM, business relationship management, Data, Engineering, product teams, and Internal Audit; preserve independent control authorities and ensure delivery teams do not approve their own risk acceptance.
• Build and automate intake, assessment, evidence collection, decision records, monitoring, dashboards, and issue-management mechanisms; measure cycle time, predictability, avoidable rework, control effectiveness, and unresolved risk.
• Lead a high-leverage team that models a build-and-show culture and manage function personnel, budgets, performance, capacity, and development in accordance with enterprise policy.
• Performs other duties as assigned.

• Deep healthcare experience and knowledge of clinical and operational workflows, patient and consumer risk, regulated data, quality, safety, and accreditation obligations. [Required]
• Expert knowledge of enterprise governance, risk, compliance, assurance, audit, privacy, security, clinical safety, or comparable control disciplines. [Required]
• Working knowledge of predictive, generative, and agentic AI lifecycles, model and data dependencies, monitoring, common failure modes, and responsible-AI practices. [Required]
• Ability to apply NIST, ISO, healthcare regulatory, accreditation, audit, privacy, security, and enterprise-control frameworks to practical operating mechanisms and evidence. [Required]
• Strong independent judgment and ability to distinguish risk ownership, control ownership, governance disposition, remediation accountability, and Internal Audit independence. [Required]
• Ability to design and automate risk tiers, intake and assessment workflows, control requirements, monitoring obligations, exception mechanisms, decision records, service measures, and audit-ready evidence packages. [Required]
• Executive communication, business-value and risk storytelling, committee facilitation, respectful challenge, conflict navigation, issue management, escalation, and active cross-functional influence skills. [Required]
• Hands-on ability to build and automate governance mechanisms using AI-first, first-principles, and lean-management methods while developing a force-multiplier team that produces repeatable controls, faster decisions, and measurable risk outcomes. [Required]

• Bachelor’s Degree [Required]
• Master’s Degree [Preferred]

• In Healthcare Administration, Law, Compliance, Risk Management, Information Systems, or related field [Required]

• 7+ years of relevant experience [Required]
• 5+ years of leadership experience [Required]

• Certified Information Systems Auditor (CISA) OR Certified in Risk and Information Systems Control (CRISC) [Preferred]

Certain positions are subject to Florida Level 2 background screening, including fingerprinting, as required by state law.

Applicants may review general information about Florida’s background screening requirements at the Florida Care Provider Background Screening Clearinghouse:
https://info.flclearinghouse.com/

This facility is an equal opportunity employer and complies with federal, state and local anti-discrimination laws, regulations and ordinances.