AI Governance & Risk Analyst
About the position
Crocs, Inc. is establishing a centralized Enterprise AI function to promote the responsible use of artificial intelligence throughout the company. The AI Governance & Risk Analyst will report to the Sr Manager, AI Solutions & Delivery and will be responsible for creating the policies, controls, risk assessments, and oversight processes necessary for the team to operate efficiently while safeguarding the company. This role involves close collaboration with engineers, analysts, business stakeholders, Legal, Information Security, IT, and auditors to develop practical guidelines, assess AI risks, ensure compliance, and promote responsible AI practices. The ideal candidate should possess a strong foundation in governance, risk, or compliance, coupled with sufficient knowledge of AI and modern model behaviors to effectively assess risk, design controls, and ask pertinent questions from the outset.
Responsibilities
- Build and maintain the enterprise AI governance framework, including policies for acceptable use, data handling, model risk, human-in-the-loop requirements, audit trails, and responsible AI principles.
- Translate governance requirements into practical workflows, templates, checklists, and review gates that teams can follow as part of day-to-day AI intake, delivery, and oversight.
- Conduct risk assessments for new AI use cases, evaluating data sensitivity, regulatory exposure, business impact, model behavior, and potential unintended consequences.
- Build and maintain the AI risk register, tracking identified risks, mitigation strategies, owners, and status across the Enterprise AI portfolio.
- Partner with engineering and solutions teams to design appropriate controls into AI solutions before launch, including human review checkpoints, escalation paths, fallback mechanisms, and monitoring requirements.
- Support compliance for AI initiatives, including SOX-relevant pricing, promotions, and financial processes, as well as applicable data privacy, consumer protection, and AI regulatory requirements.
- Build and maintain audit-ready documentation, evidence packages, and oversight processes that demonstrate compliance to internal audit, external auditors, and regulators as needed.
- Serve as a key partner to Legal, Information Security, IT, engineering, and business stakeholders on AI-related risk, compliance, responsible AI practices, incident response, and continuous process improvement.
Requirements
- Bachelor’s degree or equivalent experience in Business, Information Systems, Risk Management, Legal Studies, or a related field.
- 4+ years of experience in governance, risk management, compliance, internal audit, information security, or a related discipline.
- Working familiarity with AI/ML concepts and how modern AI systems (including LLMs and generative AI) function — sufficient to evaluate risk, design appropriate controls, and ask the right questions of engineering teams. You don’t need to build models, but you need to understand them.
- Strong understanding of enterprise risk frameworks and compliance requirements — particularly SOX, with familiarity in data privacy and consumer protection regulations.
- Demonstrated ability to translate policy and regulatory requirements into practical workflows and controls that operational teams can follow.
- Excellent written communication skills — able to produce clear policies, risk assessments, and audit-ready documentation.
- Strong analytical thinking and attention to detail — you spot the issue others miss and ask the question others didn’t think to ask.
- Self-directed and comfortable with ambiguity — this is a new function, and you’ll be helping define how governance operates, not just following an established playbook.
Benefits
- medical, dental, and vision coverage
- life and AD&D
- short and long-term disability coverage
- paid time off
- employee assistance
- participation in a 401k program that includes company match
- company incentive program
