AI Governance & Risk Analyst

Overview

Crocs, Inc. is building a centralized Enterprise AI function to drive responsible adoption of artificial intelligence across the organization. Reporting to the Sr Manager, AI Solutions & Delivery, the AI Governance & Risk Analyst will establish the policies, controls, risk assessments, and oversight processes that allow the team to move quickly while protecting the company. This role partners closely with engineers, analysts, business stakeholders, Legal, Information Security, IT, and auditors to build practical guardrails, evaluate AI risk, support compliance, and champion responsible AI practices. The ideal candidate brings strong governance, risk, or compliance fundamentals, along with enough familiarity with AI and modern model behavior to assess risk, design controls, and ask the right questions from day one.

What You'll Do

• Build and maintain the enterprise AI governance framework, including policies for acceptable use, data handling, model risk, human-in-the-loop requirements, audit trails, and responsible AI principles.
• Translate governance requirements into practical workflows, templates, checklists, and review gates that teams can follow as part of day-to-day AI intake, delivery, and oversight.
• Conduct risk assessments for new AI use cases, evaluating data sensitivity, regulatory exposure, business impact, model behavior, and potential unintended consequences.
• Build and maintain the AI risk register, tracking identified risks, mitigation strategies, owners, and status across the Enterprise AI portfolio.
• Partner with engineering and solutions teams to design appropriate controls into AI solutions before launch, including human review checkpoints, escalation paths, fallback mechanisms, and monitoring requirements.
• Support compliance for AI initiatives, including SOX-relevant pricing, promotions, and financial processes, as well as applicable data privacy, consumer protection, and AI regulatory requirements.
• Build and maintain audit-ready documentation, evidence packages, and oversight processes that demonstrate compliance to internal audit, external auditors, and regulators as needed.
• Serve as a key partner to Legal, Information Security, IT, engineering, and business stakeholders on AI-related risk, compliance, responsible AI practices, incident response, and continuous process improvement.

What You'll Bring to the Table

• Bachelor’s degree or equivalent experience in Business, Information Systems, Risk Management, Legal Studies, or a related field.
• 4+ years of experience in governance, risk management, compliance, internal audit, information security, or a related discipline.
• Working familiarity with AI/ML concepts and how modern AI systems (including LLMs and generative AI) function — sufficient to evaluate risk, design appropriate controls, and ask the right questions of engineering teams. You don’t need to build models, but you need to understand them.
• Strong understanding of enterprise risk frameworks and compliance requirements — particularly SOX, with familiarity in data privacy and consumer protection regulations.
• Demonstrated ability to translate policy and regulatory requirements into practical workflows and controls that operational teams can follow.
• Excellent written communication skills — able to produce clear policies, risk assessments, and audit-ready documentation.
• Strong analytical thinking and attention to detail — you spot the issue others miss and ask the question others didn’t think to ask.
• Self-directed and comfortable with ambiguity — this is a new function, and you’ll be helping define how governance operates, not just following an established playbook.

#LI-AE1