AI GRC Architect

- Define and lead enterprise architecture for AI Governance and Cyber GRC workflows, including standardized risk/control/evidence operating models. - Own end-to-end AI governance lifecycle design: intake, classification, risk tiering, review/approval gates, exception handling, monitoring, and periodic reassessment. - Translate policy and regulatory obligations into technical control patterns and reusable architecture blueprints deployable across UAT and production. - Design and govern resilient API integrations across OneTrust, Archer, and broader enterprise systems, including SaaS-to-on-premise and hybrid environment constraints. - Establish role, group, and organizational segmentation architecture to enforce least-privilege access and scalable governance operations. - Lead architecture decisions for automation, error handling, observability, incident response, and production support readiness. - Chair cross-functional architecture reviews and influence risk, compliance, and engineering decision forums on control design and prioritization. - Mentor engineers and analysts through architecture standards, implementation playbooks, and design quality reviews.

- AI governance workflows are standardized and operating consistently across major business domains. - Manual evidence collection effort is materially reduced through automation and reusable control patterns. - Assessment cycle times improve with clearer lifecycle gates, ownership, and exception pathways. - Audit and regulatory traceability are strengthened with high-confidence control-to-evidence lineage.

- 8+ years of combined experience across governance, risk, compliance, cybersecurity engineering, or adjacent technical disciplines in complex enterprise environments. - 5+ years in enterprise architecture or senior engineering roles delivering security, GRC, compliance, or governance platforms at scale. - Demonstrated experience designing enterprise AI governance or model risk lifecycle controls from policy through technical implementation. - Deep integration engineering expertise: REST APIs, OAuth, reliability patterns, dependency governance, and production-grade operational resilience. - Strong software and scripting capability (for example Python, JavaScript, and API-driven automation) with flexibility to work across unfamiliar stacks when needed. - Experience translating business and regulatory requirements into control taxonomies, implementation plans, and governed technical workflows. - Strong executive and technical communication skills, including architecture decision records, stakeholder alignment, and risk tradeoff articulation. - Proven experience leveraging GRC platforms to operationalize compliance requirements across frameworks including SOC 2, HITRUST, NIST AI RMF, and PCI DSS through automated assessments, continuous control monitoring, evidence management, and compliance reporting.

- Strong OneTrust experience across multiple modules (for example IT Risk Management, Assessment Automation, Data Mapping, Privacy Rights, Consent, and related capabilities). - Experience leading vendor/platform gap remediation, escalation strategies, and workaround playbooks in regulated enterprise environments. - Familiarity with Responsible AI Governance implementation for production AI/ML use cases, including control harmonization across legal, risk, and engineering stakeholders. - Expertise building executive-ready dashboards and KPIs (Power BI or similar) that connect governance operations to risk posture and decision quality. - Experience collaborating with external implementation partners while maintaining architecture standards and internal control requirements.

- This role is on-site Monday through Friday. Fiserv considers in-person collaboration to be an essential part of this role as in-person office experiences help you with your overall onboarding experience and leads to stronger productivity.

- Approximately 10% travel off-site or to other office locations is expected.

- You must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including, but not limited to, F-1 (OPT, CPT, STEM), H-1B, H-2, or TN, or any candidate requiring sponsorship, now or in the future, will not be considered.

For incentive eligible associates, the successful candidate is eligible for an annual incentive opportunity which may be delivered as a mix of cash bonus and equity awards in the Company's sole discretion.