AI Risk & Governance Supervising Associate - Europe West

Relationship Manager responsible for recruitment process: Aleksandra Kowalik
Rank of role: 64
Location: Wrocław / Katowice - 2 days in office / 3 days remote

AI Risk & Governance Supervising Associate – Europe West

Role overview

The AI Risk & Governance Supervising Associate will support the Europe West Data Risk/DSO team in operationalizing AI governance across the region. The role focuses on translating global AI policies, regulatory expectations and AI risk control requirements into practical guidance, monitoring routines, stakeholder support and governance oversight for Europe West AI solutions.

The role will work closely with Global Risk Management, Europe West Technology, GCO/DPO, Service Line Quality, BMC and business stakeholders to support consistent, risk-based and practical implementation of AI governance requirements.

Key responsibilities

AI governance and policy implementation

• Support the rollout and regional adoption of EY global AI governance policies, standards and control requirements across Europe West, including alignment with regulatory requirements such as the EU AI Act.
• Translate AI governance requirements into practical guidance, playbooks, templates and business-facing materials to enable consistent implementation.
• Develop and maintain Europe West AI governance content, including FAQs, process guidance, communication materials and decision-support tools.
• Support clear documentation of AI governance roles, responsibilities, escalation paths and evidence requirements across relevant processes.

AI risk identification and control oversight

• Support the identification, assessment and documentation of AI-related risks across Europe West AI solutions, including risks related to data, confidentiality, privacy, information security, model lifecycle, explainability, bias and regulatory compliance.
• Assist business owners with the implementation of AI risk controls and mitigation activities in line with the global AI Risk and Control Matrix.
• Help control owners connect AI risk control requirements with existing governance processes, including AIRA, AI QRM, privacy impact assessments, InfoSec reviews and other downstream reviews.
• Review EY AI governance framework and related artefacts to identify potential gaps, missing evidence or required follow-up actions.

Monitoring, reporting and compliance follow-up

• Monitor adherence to AI governance requirements for Europe West AI solutions, including the status and quality of AIRA submissions and downstream governance reviews (e.g., AI QRM, InfoSec, PIA, etc.).
• Support escalation of unresolved risks, overdue actions or non-compliance concerns of Europe West AI Solutions through agreed Europe West governance channels.
• Track EY AI governance implementation pipeline status, open actions, blockers, recurring risk themes and escalation items for Europe West.
• Prepare concise updates on key risks, trends, compliance gaps and remediation progress for Europe West Risk Management leadership.

Stakeholder engagement and advisory support

• Collaborate with regional stakeholders: Europe West Technology, GCO/DPO, Risk Management, Service Line Quality and business stakeholders (e.g., Service Line AI Leader) to support consistent AI risk identification, mitigation and governance execution.
• Act as a practical point of contact for EY AI risk governance queries across Europe West, helping stakeholders understand applicable requirements and next steps.
• Support business teams in preparing required EY AI governance submissions, evidence and follow-up actions.
• Coordinate with Global Risk Management and regional stakeholders to ensure Europe West AI governance activities remain aligned with global direction.
• Work with Europe West BMC and change management stakeholders to strengthen awareness and adoption of EY AI governance requirements across relevant audiences.

Enablement and awareness

• Support the design and delivery of awareness materials, training content and practical guidance on responsible AI use and EY AI governance processes.
• Convert EY policy and control requirements into business-friendly messaging, examples and “how-to” guidance.
• Develop practical tools, checklists, playbooks and templates to support consistent adoption of EY AI governance requirements.
• Capture recurring stakeholder questions and implementation challenges to continuously improve guidance, communications and processes (e.g., FAQs).

Required skills and experience

• Good understanding of AI concepts and common AI risk areas, including bias, explainability, transparency, model lifecycle, data quality, privacy and information security.
• Familiarity with EY AI governance frameworks, EY Responsible AI Principles and emerging regulatory requirements, particularly the EU AI Act.
• Background in risk management, technology compliance, information security, internal controls or related governance areas.
• Ability to understand and apply risk and control concepts, including control objectives, evidence requirements, issue tracking and escalation.
• Strong PMO skills, including action tracking, stakeholder follow-up, documentation and status reporting.
• Structured problem-solving skills and ability to translate complex governance topics into practical next steps.
• Strong comms skills, with the ability to explain governance requirements to both business and technical audiences.
• Ability to work across global, regional and local teams in a complex matrix environment.
• Confidence in engaging with senior stakeholders and preparing clear management-ready summaries.

Success measures

Success in this role will be reflected through:

• improved clarity for business teams on EY AI governance requirements;
• more consistent and complete AI governance submissions (i.e., AIRA registration);
• better visibility of Europe West AI solution compliance status, including open actions and review status;
• timely escalation of governance gaps and unresolved risks;
• practical guidance that helps stakeholders navigate EY AI governance processes efficiently;
• stronger coordination across Risk, Technology, GCO/DPO, Service Line Quality and business stakeholders.

In compliance with the requirements of the Whistleblower Protection Act, our company has established the Procedure for reporting breaches of law and undertaking appropriate follow-up actions. Any misconduct should be reported through the EY Ethics Hotline.