Risk Management Specialist

We are seeking an experienced AI Risk, Compliance, and Policy Integration Specialist for a hybrid role in Sacramento, California. This role focuses on risk management, compliance oversight, and supporting the policy lifecycle. The position ensures that AI systems are deployed safely, ethically, and in compliance with state and federal regulations. Responsibilities include the following, as well as contributions to Executive Communications Support (Role 3), particularly in areas of compliance and risk messaging.

Specific Responsibilities

* Monitor and Maintain Security Controls

* Continuously monitor and strengthen the security controls embedded within AI and data platforms.

* Align with enterprise cybersecurity teams to ensure consistency with statewide standards.

* Address emerging vulnerabilities as technologies evolve to safeguard Caltrans' data assets and uphold public trust.

* AI Audits

* Conduct regular audits to assess compliance, fairness, and potential bias in AI models and datasets.

* Provide transparency and accountability while building stakeholder confidence in the responsible use of AI.

* Use findings to strengthen processes, policies, and future model development.

* AI and Data Organizational Risk Management

* Maintain a comprehensive risk register covering operational, ethical, and compliance risks related to AI and data.

* Identify emerging risks, document mitigation strategies, and update leadership on potential exposures.

* Ensure informed decision-making and proactive safeguards through structured risk management.

* Business Continuity and Disaster Recovery

* Develop continuity and disaster recovery plans for critical AI and data systems.

* Ensure operational resilience during disruptions through periodic testing and integration into enterprise continuity frameworks.

* Sustain mission-critical operations under adverse conditions.

* Regulatory Compliance Monitoring

* Track compliance with key regulatory mandates including SB 896, SIMM 5305-F, AB 2013, and CPRA.

* Implement processes for continuous monitoring, reporting, and enforcement.

* Embed compliance into day-to-day operations to help Caltrans avoid legal exposure and maintain public confidence.

* Ethical AI Oversight

* Conduct fairness and accountability reviews of AI initiatives before deployment and during ongoing oversight.

* Ensure models minimize bias and protect equity through ethical review processes.

* Anticipate and resolve concerns before they become barriers to adoption.

* Policy and Process Lifecycle Management

* Manage the review and update cycle for AI and data-related policies to reflect evolving regulations and industry standards.

* Ensure policies remain current, actionable, and enforceable.

* Support rollout and adoption of new or revised processes across the enterprise.

Required

* 5 years of experience in risk management, compliance, or governance in technology or data environments.

* Strong understanding of AI systems, data governance, and information security frameworks.

* Proven experience implementing or auditing compliance programs for large enterprises.

* Excellent written communication and documentation skills.

* Ability to manage multiple priorities in a regulatory and fast-evolving technical landscape.

* Bachelor's Degree in Computer Science, Information Systems, Public Policy, or related field (Master's preferred).

Preferred

* Experience with government or public-sector compliance frameworks.

* Knowledge of California privacy and data protection regulations (e.g., CPRA, AB 2013).

* Experience conducting AI fairness or bias audits.

* Familiarity with ISO, NIST, or other security control standards.

* Relevant certifications (e.g., CISA, CRISC, CIPM, PMP) preferred.

Education, Certification, Training & Experience

* Training or certification in risk management, compliance, or cybersecurity is desirable.