Senior Director, AI Operational Governance

Senior Director, AI Operations Governance

Overview

The Senior Director, AI Operations Governance leads the operational engine that governs how The Coca-Cola Company designs, reviews, approves, deploys, and retires Artificial Intelligence across the enterprise. The role establishes and runs the intake, review, and approval process for AI use cases across every function and Operating Unit worldwide - enabling the business to move at speed while ensuring every AI solution is safe, secure, standardized, and compliant with Company policy and applicable law.

Reporting to the Senior Vice President & Chief Information Security Officer (CISO), this role serves as the CISO organization's senior operating leader on AI Governance and as a member of the Company's AI Risk Governance Council. Under delegated authority, the Senior Director holds tiered decision rights - approving lower-risk use cases within defined guardrails, requiring corrections on cases thatdon'tmeet standard, and escalating high-risk, novel, or regulated use cases to the Council or CISO for final decision.

This is a people-leader role. The Senior Director builds and leads a global team of governance professionals and partners closely with Legal, Privacy, the Data & AI organization, Cyber Risk, Cyber Defense, Internal Audit, and business leaders across Operating Units - bringing the enterprise one clear, consistent, and credible AI governance experience from idea to production and beyond.

Key Responsibilities

AIOperationalGovernance Program Ownership

Own the Company's enterprise AIoperationsgovernancemodel - the process, standards, roles, decision rights, and tools that govern AI use cases at Coca-Cola.

Ensure the program enables rapid, safe, andoperationally alignedAI adoption across every function and Operating Unit worldwide.

Set the operating cadence - intake reviews, tiered risk boards, exception forums, and escalation paths to the AI Risk Governance Council.

Continuously improve theprogramso governance keeps pace with the Company's AIstrategy,ambitionsand the evolving external landscape.

Use-Case Intake, Review & Approval

Operate a single, well-known intake process for AIusecasesand toolsacross all functions and Operating Units, from ideation through deployment.

Classify each use case(including tools and products)by risk tier using clear, published criteria that reflectstrategic alignment,business impact,return on investment,data sensitivity, model type, autonomy, and regulatory exposure.

Under delegated authority, approve, require corrections on, or deny lower- and medium-risk use cases within defined guardrails.

Escalate high-risk, novel, or regulated use cases with clear recommendations to the AI Risk Governance Council or CISO for final decision.

Ensureevery decision is documented with rationale, conditions, and auditable evidence.

AI Solution Lifecycle Governance

Embed governance into the full AI solution lifecycle - ideation, design, data sourcing, build, validation, deployment, ongoing monitoring, re-validation, and retirement.

Define lifecycle gates and evidence requirements appropriate to each risk tier (e.g., human oversight, bias and fairness testing, security review, privacy review, model documentation,monitoringplan).

Ensure retired or replaced AI systems are formally decommissioned, with data and access appropriately closed out.

Overseeoperations of model provisioningand approval, agent build approval,agent publishing approval, and approval of models and tools to be usedCompany-wide.

Policies, Standards & Guardrails

Own the Company's AIoperatingstandards, and operating guardrails, keeping them clear, current, and workable for the businesswith oversight from the AI Risk Governance Council.

Coordinate with Legal, Privacy, Cyber RiskManagement, Data & AI, and Ethics & Compliance so guardrails reflect legal, regulatory, ethical, security, and business realities.

Communicaterequirementsand guardrails to the Company through clear guidance, training, and self-service tooling that helps business teams do the right thing by default.

Cross-Functional Partnership & Council Engagement

Serve as a working member of the AI Risk Governance Council (Chair: CISO; Vice-Chair: SeniorDirectorCyber Risk Management), bringing forward operational insight, decision papers, and escalations.

Partner day-to-day with Legal, Privacy, the Data & AI organization, Ethics & Compliance, Internal Audit, and Cyber leadership to ensure a single, coherent enterprise governance experience.

Build durable relationships with Operating Unit& functionalleaders and Bottling System partners so governance is understood, respected, and used.

Champion consensus-building across functions with different priorities and operating models.

Regulatory & Standards Alignment

Ensure the operating program aligns to leading standards - including NIST AI Risk Management Framework and ISO/IEC 42001 - and to the global body of AI regulation, including the EU AI Act, Chinese AI rules, U.S. state AI laws, and emerging frameworks in other Coca-Cola markets.

Work with the SeniorDirectorCyber Risk Managementand Legal counsel to translate regulatory obligations into practical governance requirements.

Adjust the operating program as regulations evolve, so the Company stays ahead rather than reacting to change.

AI Inventory, Reporting & Assurance

Maintainan accurate, enterprise-wide inventory of AI systems,their risktiers, owners, decisions, and lifecycle status.

Produce clear, executive-framed reporting to the CISO,Cyber Risk Management,the Council, and senior management on AIoperationalgovernance posture, throughput, risk trends, and material decisions.

Develop andmaintaina regular cadence with Cyber Risk Management (Senior Director, Cyber Risk)on AI Policy adherence, AI risk and issues trends, data feeds for Cyber GRC risk reporting and metrics for AI, challenges in execution of AI controls, and AI Council escalations.

Support Internal Audit, external auditors, and regulator engagements with defensible narratives, decision records, and evidence.

Partner with Cyber Defense on assurance activities that test whether guardrails hold in the real world (e.g., AI red teaming, shadow-AI discovery).

People Leader

Build and lead a global AI Operations Governance team, sized to the Company's AI ambitions and risk posture.

Seta clear vision, hire strong talent, and develop a deep bench of AIoperationsprofessionals, both global/corporate and at the operating unit level.

Hold the team accountable for outcomes - throughput, decision quality,evidencerigor, and business enablement.

Foster an inclusive, mission-oriented, high-performance culture across a networked, global team.

Manage budget, vendor relationships, and platform investments with discipline.

Qualifications

Minimum15+ years of progressive experience in AI governance, technology risk, data governance, privacy, or regulatory compliance in large, global organizations, with a meaningfulportionfocused on AI or emerging technology.

Demonstrated experience building or running atechnology governance program with intake, review, and approval authority.

Strong working command of leading AI governance frameworks (NIST AI RMF, ISO/IEC 42001) and the global AI regulatory landscape (EU AI Act, Chinese AI rules, U.S. state AI laws).

Working knowledge of AI technology fundamentals - machine learning, large language models, agentic AI, third-party AI - enough to engage credibly with technical and business teams.

Proven ability tooperateacross a networked, matrixed, global organization and partner ecosystem (Operating Units, bottling system, or analogous complex networks).

Strong people-leadership experience, including hiring, developing, and leading multi-disciplinary global teams.

Exceptional executive communication and influence skills; able to translate complex governance and regulatory topics into clear choices for senior business and technology leaders.

Experience partnering closely with Legal, Privacy, Data, Cyber, Ethics & Compliance, and Internal Audit on cross-functional governance.

Relevant certifications such as IAPP AIGP, CIPP/E, CIPM, CDPSE, CISM, or CRISC are strongly preferred.

Education

Bachelor's degree in Law, Public Policy, Information Systems, Computer Science, Data Science, Risk Management, or related fieldrequired.

Master's degree, JD, MBA, or advanced credential (AIGP, CIPP/E, CISSP, CISM, or equivalent)highlydesirable.

The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States.

Pay Range

United States of America: 202,000 USD - 229,000 USD

Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.

Annual Incentive Reference Value Percentage

30

Annual Incentive reference value is a market-based competitive value for your role. It falls in the middle of the range for your role, indicating performance at target.

Location(s)

United States of America

City/Cities

Atlanta

Travel Required

00% - 25%

Relocation Provided

No

Job Posting End Date

August 14, 2026

Our Purpose and Growth Culture

We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what's possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors - curious, empowered, inclusive and agile - and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.

Pay Range:United States of America: 0 USD - 0 USD

Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered.

Annual Incentive Reference Value Percentage:30

Annual Incentive reference value is a market-based competitive value for your role. It falls in the middle of the range for your role, indicating performance at target.