Senior AI Governance Engineer

We are looking for an experienced AI Governance Engineer to own the technical governance of generative AI and machine learning tools across the enterprise. This is a high-impact, hands-on role that sits at the intersection of software engineering, security, compliance, and AI. You will translate complex policies into practical guardrails, evaluate and onboard new AI capabilities safely, and ensure our developers can move fast without breaking things (or regulations). You are the bridge between “AI looks cool” and “AI is safe, compliant, and cost-effective at enterprise scale.”

What you'll do

• Design, implement, and maintain the technical governance framework for all GenAI/LLM tools and integrations.
• Evaluate, approve, onboard, monitor, and retire third-party and open-source AI tools (LLMs, vector databases, agents, orchestration platforms, etc.).
• Build and operate usage monitoring, cost tracking, compliance dashboards, and automated audit trails.
• Create lightweight, developer-friendly processes for tool requests, risk assessments, exceptions, and approvals.
• Partner with Legal, Security, Compliance, Procurement, and Engineering to translate policies into enforceable technical controls.
• Identify and mitigate AI-specific risks: prompt injection, data leakage, model misuse, training-data exposure, etc.
• Develop and deliver training, playbooks, workshops, and documentation that get used.
• Stay ahead of evolving regulations, new attack vectors, and model capabilities.
• Continuously optimize the balance between innovation velocity, risk, cost, and compliance.

What you'll need

• Strong software engineering background with deep understanding of development lifecycles, CI/CD, APIs, integrations, and versioning.
• Hands-on knowledge of modern GenAI/ML stack: LLMs, embeddings, vector stores, RAG, model endpoints, agents, and orchestration tools.
• Solid experience with at least one major cloud provider (Azure or AWS) – especially AI/ML services, networking, IAM, and governance features.
• Proven ability to interpret security, privacy, data-classification, and responsible AI policies and turn them into practical technical controls.
• Strong grasp of AI-specific security risks (prompt injection, jailbreaks, data exfiltration, inversion attacks, etc.) and mitigation patterns.
• Experience implementing identity & access governance (RBAC/ABAC, least privilege, audit logging) for AI systems.
• Demonstrated skill in cross-functional collaboration and communicating complex technical and risk concepts to non-technical stakeholders.
• Comfort in building processes, dashboards, and lightweight automation from scratch.

What is nice to have

• Prior prompt engineering or red-teaming experience.
• Familiarity with enterprise AI orchestration platforms.
• Experience with policies-as-code, audit automation, or infrastructure-as-code approaches to governance.
• Contributions to responsible AI frameworks or previous work in highly regulated industries

What we offer A competitive compensation package, of course.

Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and LinkedIn Learning.

Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities.

Work flexibility, where TomTom’ers, in agreement with their manager and team, use both the office and home to focus, collaborate, learn and socialize. It’s all about getting the best out of both worlds – we ask TomTom’ers to come to the office two days a week, and the remaining three are free to be worked in either location.

Improve your home office with a setup budget and get extra support with a monthly allowance.

Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends, or to s