AI Business Facing (AI use-case intake and governance for business unit portfolios)

Manage AI use-case intake and governance for defined business unit portfolios. You own the use-case pipeline register from intake through triage to handoff, track governance status, and develop the AI governance playbooks that let business teams self-serve rather than queueing for Cyber Architecture and Solutions advice.

Key responsibilities:

• Own AI use-case intake and governance for defined business unit portfolios , running each proposal to a recorded decision inside an agreed service level.
• Maintain the use-case pipeline register from intake through triage to handoff, and keep it accurate enough to be the single source of truth.
• Apply EU AI Act classification and AI risk and prioritisation scoring to each proposal, including for use cases in GxP-validated contexts.
• Track governance status per use case and chase the architecture, security and Responsible AI decisions that unblock them.
• Coordinate with AI Architecture on feasibility and with AI Security on model and agent risk assessment.
• Develop AI governance playbooks , intake criteria, data handling rules and approval routes , that business teams can apply themselves.
• Run business-side shadow AI discovery alongside the technical discovery programme, and bring findings into the register.
• Support AI security awareness activity for business leaders and translate technical requirements into language they will act on.
• Escalate use cases that cannot meet the security standards rather than progressing them informally.
• Publish the monthly AI portfolio view the Director takes to the Responsible AI council , proposals in flight, decisions overdue, and the shadow AI tools found that month.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements.
• Own the design of the AI use-case intake service , the decision rights, the service levels and the outcome measures it is judged on , rather than only operating it.
• Set and report the value and outcome measures for the approved use-case portfolio, so the intake service is held to benefit delivered as well as risk avoided.

Basic Qualifications:

• 15+ years in cyber security, AI governance or technology risk in a regulated environment , domain focus: AI Business Facing (AI use-case intake and governance for business unit portfolios)
• Running AI use-case intake and governance , owning the use-case pipeline register from intake to handoff, tracking governance status and chasing blocking decisions, with automated intake and status tracking
• Assessing AI use cases for security, data classification, model risk and regulatory impact, coordinating feasibility with AI Architecture and risk assessment with AI Security before routing to engineering
• Business-side shadow AI discovery alongside technical discovery, driving remediation of unsanctioned AI tools and copilots through engagement
• Translating GenAI, LLM and agent risks (data leakage, prompt injection, hallucination, IP exposure) into plain-language guidance and governance playbooks business teams can apply themselves

Preferred Qualifications:

• AI governance frameworks , EU AI Act, NIST AI RMF and ISO/IEC 42001
• AI risk assessment and prioritisation , plus workflow automation or low-code tooling
• Regulated industry experience, including GxP
• Executive stakeholder exposure and influencing without authority
• ServiceNow or Power Apps workflow build, so intake is a form with validation rules rather than an inbox.