Head of AI and Technology Risk

Who we are

We are one of the largest international law firms in the world. With over 30 offices across the globe, we strive to exceed the expectations of our clients, providing them with the highest-quality advice and legal insight, which combines the firm’s global standards with in-depth local expertise.

Our firm, work and people span jurisdictions, cultures, and languages. We offer our clients a truly international perspective. We believe every career should be rewarding and stimulating - full of opportunities to learn, thrive, and grow. That’s why we’re so proud of our inclusive, friendly, and team-based approach to work.

Our one firm global strategy is focused on targeted growth led by the needs of our core clients, those who we can best support with the breadth and depth of Clifford Chance expertise, across the sectors and geographies, which matter most to them.

You’ll find our clients in commercial and industrial sectors, the financial investor community, governments, regulators, trade bodies, and not-for-profit organisations. But no matter who they are or why they’ve reached out to us, we provide a world-class service every step of the way. And that’s possible thanks to the entrepreneurial spirit and conscientious approach to work that you’ll find across all of our teams.

Whichever area of the business you join, you’ll become an integral part an innovative, diverse and ambitious team of people. Clifford Chance is a place where the brightest minds and the best of colleagues meet.

The role

We are seeking a senior risk professional to be an independent advisor within our Risk & Compliance function to lead in advising the firm on Technology, AI and Innovation Risk. This role will lead the assessment, governance, and ongoing management of risks and regulatory requirements arising from the firm’s use of emerging technologies, including artificial intelligence (AI), automation, and digital innovation.

The successful candidate will combine strong regulatory and risk expertise with commercial pragmatism and a deep understanding of technology risk in a professional services or legal environment.

Key responsibilities

• Lead the firm’s approach to identifying, assessing, and mitigating risks associated with new and emerging technologies, including AI tools and platforms.
• Develop and maintain a Technology and AI Risk Framework, aligned to legal sector regulatory expectations and industry best practice.
• Advise senior stakeholders (including CIO, CTO, Innovation teams, and partners) on risk, regulatory and reputational implications of technology adoption.
• Collaborate closely with key stakeholders to ensure that AI Risk oversight complements and supports the firm's information security, data privacy and enterprise risk management frameworks.
• Ensure alignment with firm-wide risk appetite and governance standards.
• Act as a dedicated Risk advisor to IT, cybersecurity, and innovation functions.
• Embed risk-by-design principles into technology development, procurement, and implementation processes.
• Participate in key technology governance forums, steering committees, and project boards as appropriate.
• Design and implement policies covering responsible AI use, that embed and reflect the firm's compliance policies including:
• Confidentiality
• Model risk and explainability
• Bias and ethical considerations
• Client confidentiality, professional conduct obligations and legal privilege risks
• AI security threats (e.g. prompt injection, data poisoning, model and data exfiltration), adversarial testing / AI red-teaming, model inventory and validation
• Establish approval, review, detection and containment processes for AI tools (including generative AI), covering sanctioned tools and unsanctioned “shadow AI” use in collaboration with IT Risk & Security.
• Establish approval and review processes for AI tools (including generative AI).
• Working with the General Counsel team, ensure appropriate client disclosures where required, including in relation to Outside Counsel Guidelines and client-specific security and AI-use requirements.
• Monitor and interpret global regulatory developments relating to:
• AI regulation (e.g. EU AI Act and equivalents)
• Legal sector obligations and professional standards
• NIS2 / DORA and equivalent operational resilience or cybersecurity regimes where in scope
• Client-jurisdiction AI, data and security regimes applicable to firm operations or client requirements
• Translate regulatory requirements into actionable internal policies and controls.
• Conduct and advise on risk assessments, as appropriate, for new systems, vendors, and technology deployments.
• Collaborate with IT on:
• Regulatory and client-obligation mapping for third-party and technology risk
• Control-adequacy challeng

Strategic Technology & AI Risk Oversight

Business Partnering with IT & Innovation Teams

AI Governance & Responsible Use

Horizon Scanning

Technology Risk Assessment & Controls