AI Governance Lead

The mission:

The AI Enablement team in our Digital Center of Excellence is looking for an AI Governance Lead. Your mission is to make responsible AI practical: helping Konecranes use and scale AI securely, compliantly and with clear accountability, without turning governance into unnecessary friction.

AI is rapidly moving from individual assistants and models to solutions that combine data, models, agents, tools and enterprise systems. This creates new opportunities, but also new operational, security, data, model and third-party risks. In this role, you will translate those risks and evolving requirements into clear decisions, proportionate controls and technical guardrails that teams can apply in practice.

This is a hands-on, cross-functional lead role. You will work across business units, IT, Security, Architecture, Data Privacy, Legal, Compliance and Internal Audit, and partner closely with AI product owners, architects and development teams. You will be part of AI Enablement and report to the Director, AI Enablement.

What you'll do:

1) Shape and run practical AI governance:

• Develop and continuously improve Konecranes-wide AI governance, including AI instructions, usage guidelines, decision rights, risk tiering, controls and accountability.
• Operate a clear, risk-based AI governance model that supports both rapid exploration and production-grade AI solutions.
• Help embed AI governance into existing enterprise risk, security, privacy, architecture, procurement and delivery processes rather than creating a separate parallel bureaucracy.
2) Lead AI triage, risk assessment and lifecycle oversight:

• Run AI triage and facilitate risk assessments for new AI features, applications, use cases and significant changes to existing solutions.
• Assess operational, security, data, model and third-party risks, including misuse, unclear accountability, data leakage, excessive permissions, prompt injection, unintended actions and reliance on external providers.
• Maintain a practical view of AI systems, owners, risk classifications, required controls and lifecycle status from idea through deployment and retirement.
• Support AI incident handling and ensure that lessons learned are translated into improved guidance and controls.
3) Turn requirements into technical and operational guardrails:

• Translate regulatory, security and risk requirements into usable technical guidance, review criteria and reusable patterns for AI teams.
• Work with architects and engineers to strengthen controls covering identity and access, data flows, tool and API/MCP permissions, logging, monitoring, evaluation, human oversight and safe failure modes.
• Review real AI solution designs and help teams identify proportionate actions that make an initiative safe and production-ready.
• Promote a pragmatic “yes, if” approach by showing teams what must change to move an initiative forward.
4) Govern third-party AI and emerging technologies:

• Support vendor, SaaS and third-party AI assessments as part of procurement and technology evaluations.
• Help define expectations for external models, AI features, agents, connectors and other composable AI components, including due diligence, access, data use, contractual safeguards and ongoing oversight.
• Monitor changes in AI technologies, threats, regulation and standards, and convert relevant developments into concrete actions for Konecranes.
5) Build capability and communicate risk clearly:

• Act as a trusted advisor for business and technology teams on responsible, secure and compliant AI use.
• Design and deliver practical training and guidance for different audiences, from AI builders and product owners to business leaders.
• Communicate AI risk posture, material decisions and improvement priorities clearly to senior stakeholders.

Function: Information Technology
Experience Level: Not Applicable