Inactive
K

Konecranes

Global material handling and crane solutions

AI Governance Lead

Security Governance, Risk & CompliancePosted on Nov 9
Full-timeEspoo, FinlandNo salary listedHybrid

About the Job

Requirements

  • Approximately 7+ years of experience across areas such as AI, software engineering, information security, enterprise architecture, technology risk, governance, or assurance in a complex organization.
  • Solid understanding of generative AI and AI agents, including how AI solutions are built, integrated, deployed, and operated, and the ability to reason about data, models, prompts, retrieval, agents, tools, APIs, and human oversight.
  • Good command of secure architectures, identity and access management, APIs, cloud services, logging, monitoring, software delivery, and risk assessment, with the ability to constructively challenge a design.
  • Sufficient knowledge of the EU AI Act, GDPR, and relevant frameworks and standards such as NIST AI RMF, ISO 27001, and OWASP guidance for LLM and agentic applications.
  • Demonstrated ability to translate regulatory, risk, or security requirements into proportionate controls, technical guidance, and actionable decisions.
  • Fluency in English.
  • Ability to explain complex AI and security topics in plain language to engineers, business leaders, and control functions.
  • Ability to take ownership, work hands-on, and improve governance as technology and regulation evolve.

Responsibilities

  • Develop and continuously improve company-wide AI governance, including AI instructions, usage guidelines, decision rights, risk tiering, controls, and accountability.
  • Operate a clear, risk-based AI governance model that supports both rapid exploration and production-grade AI solutions.
  • Embed AI governance into existing enterprise risk, security, privacy, architecture, procurement, and delivery processes.
  • Run AI triage and facilitate risk assessments for new AI features, applications, use cases, and significant changes to existing solutions.
  • Assess operational, security, data, model, and third-party risks, including misuse, unclear accountability, data leakage, excessive permissions, prompt injection, unintended actions, and reliance on external providers.
  • Maintain a practical view of AI systems, owners, risk classifications, required controls, and lifecycle status from idea through deployment and retirement.
  • Support AI incident handling and translate lessons learned into improved guidance and controls.
  • Translate regulatory, security, and risk requirements into usable technical guidance, review criteria, and reusable patterns for AI teams.
  • Work with architects and engineers to strengthen controls covering identity and access, data flows, tool and API/MCP permissions, logging, monitoring, evaluation, human oversight, and safe failure modes.
  • Review AI solution designs and help teams identify proportionate actions to make initiatives safe and production-ready.
  • Show teams what must change to move initiatives forward safely.
  • Support vendor, SaaS, and third-party AI assessments as part of procurement and technology evaluations.
  • Define expectations for external models, AI features, agents, connectors, and other composable AI components, including due diligence, access, data use, contractual safeguards, and ongoing oversight.
  • Monitor changes in AI technologies, threats, regulation, and standards, and convert relevant developments into concrete actions.
  • Advise business and technology teams on responsible, secure, and compliant AI use.
  • Design and deliver practical training and guidance for AI builders, product owners, and business leaders.
  • Communicate AI risk posture, material decisions, and improvement priorities to senior stakeholders.

Desired Qualifications

  • Background in AI/ML engineering, software development, information security, or enterprise architecture.
  • Experience assessing cloud-based AI services, third-party platforms, or AI-enabled SaaS products.
  • Experience in a global industrial environment, including manufacturing, engineering, service, product safety, or OT/IT contexts.
  • Fluency in Finnish.

About the Company

Konecranes

Global material handling and crane solutions

Konecranes makes lifting equipment and services for industrial sites, such as overhead cranes, hoists, and other material-handling solutions, along with maintenance, modernization, and related services. Its products are heavy-duty cranes and related components that move large loads; they operate through a combination of mechanical systems (cranes, hoists), electrical controls, and digital services for monitoring, safety, and efficiency. The company differentiates itself through its broad global service network, a wide portfolio that includes both single devices and integrated lifting systems, and a strategy built on servicing and supporting customers across many industries after installation. Its goal is to be a leading global provider of material-handling solutions, helping customers increase safety and productivity by moving heavy loads efficiently and reliably.

Company size
10,001+
Company stage
IPO
Headquarters
Hyvinkää, Finland
Founded
1903

Recently Posted Jobs

Explore more opportunities at Konecranes

See more jobs