About the role
Our Mission Reflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. We build open models that let anyone control their intelligence and help shape the future of AI. Our mission: make intelligence open and accessible to all. Role Overview The Head of Risk & Trust Governance is responsible for designing, operating, and continuously maturing the organization's enterprise risk management and control environment. This leader owns the full lifecycle of risk governance — from obligation identification and control architecture to risk measurement, reporting, and external representation — ensuring the organization operates within its stated risk appetite while advancing its strategic objectives. Sitting at the intersection of risk, compliance, technology, and AI safety, this role is uniquely positioned to shape how the organization understands and responds to a dynamic regulatory and operational risk landscape. The ideal candidate brings deep expertise in enterprise risk frameworks, a systems-level perspective on controls design, and the executive presence to represent the organization's risk posture to regulators, customers, and other critical external stakeholders. This is a high-visibility, high-impact role that operates across all business functions. Success requires the ability to translate complex risk concepts into actionable governance structures, influence without direct authority, and build trusted relationships internally and externally.
What You'll Do Control Environment & Risk Framework Architecture Architect and govern a control environment that drives efficient, prioritized adherence to organizational obligations in alignment with management's objectives and stated risk appetite. Design and continuously operate an enterprise risk management framework spanning risk identification, measurement, mitigation, monitoring, and reporting — contextualized against the organization's obligations, objectives, and risk tolerance. Establish a disciplined approach to risk prioritization that balances operational efficiency with the rigor required to address high-severity exposures across the enterprise. Policy, Standards & Controls Governance Architect and govern the organization's policy and standards issuance lifecycle, ensuring timely coverage of emerging obligations and strategic priorities. Oversee the design, implementation, and ongoing operation of controls and guardrails that drive adherence to obligations and objectives within defined risk appetite thresholds. Develop and maintain a structured controls taxonomy and policy hierarchy, ensuring alignment, traceability, and clear ownership across the enterprise. Enterprise Inventories & Ecosystem Oversight Own and maintain the enterprise risk registry and control inventory, ensuring completeness, accuracy, and operationalization across all relevant functions. Provide oversight over the design, quality, and utilization of key risk-related ecosystem inventories, including data inventories, IT asset inventories, and other foundational records management infrastructure. Champion data quality and governance standards across risk-related inventories, enabling confident risk measurement and management decisions. Risk Reporting & Executive Communication Develop and maintain executive-quality reporting on enterprise risk posture, policy and standards coverage, and the efficacy of regulatory and risk-driven controls. Contextualize risk reporting against the organization's obligations, objectives, and risk appetite — enabling senior leadership and the Board to make well-informed decisions. Drive continuous improvement of risk metrics, dashboards, and reporting cadences to reflect evolving organizational priorities and stakeholder needs. AI Governance & Ethics Coordinate with the Head of AI Governance (in Legal) to manage AI risk. Own and maintain the AI use-case inventory and the AI use-case risk and ethics evaluation framework, including use-case tiering and risk classification methodologies. Ensure AI governance practices are aligned with regulatory expectations, ethical principles, and enterprise risk appetite, and that evaluation frameworks evolve in step with the rapidly changing AI landscape. Partner with product, engineering, legal, and compliance stakeholders to embed AI risk considerations into the design and deployment of AI systems. External Engagement & Regulatory Representation Represent the organization on risk, governance, and AI safety topics in interactions with regulators, customers, auditors, and other external stakeholders. Lead or contribute to the negotiation of contracts, agreements, and licenses with risk and compliance implications, advocating for risk-informed terms and organizational protections. Monitor the external regulatory and industry landscape to anticipate emerging obligations, translate new