AI Risk & Controls Lead
Posted Jun 30, 2026 · We last checked this listing on Oct 6, 2026
Likely interview questions for this role
Written from this job description, not a generic list. Each one notes what the interviewer is really checking.
About your past
Tell me about a control framework you set up that people actually followed. What made it stick?
What they are checking: Whether they have built practical controls that teams adopt, not just documents.
Tell me about a time you had to explain a technical risk to senior leaders or a committee.
What they are checking: Whether they can make AI risk clear and actionable for decision-makers.
What would you do
A business team wants to launch an AI tool next month, and your controls review isn't finished. How do you handle it?
What they are checking: Whether they can enable innovation with proportionate controls without becoming a blocker or rubber stamp.
How would you partner with second-line Risk, Compliance and Internal Audit so first-line AI controls meet their expectations?
What they are checking: Whether they understand the three lines of defense and can align with them early.
An audit finds an AI tool was deployed without completing required controls. What do you do?
What they are checking: Whether they respond with remediation and root cause fixes instead of blame.
About the work
How would you design a first-line-of-defense control framework for AI that covers design, build, deployment and monitoring?
What they are checking: Whether they can structure controls across the whole AI lifecycle and tie them to enterprise risk standards.
What risks are unique to generative AI and large language models compared with traditional models, and how would you control them?
What they are checking: Whether they understand hallucination, data leakage, prompt injection and similar risks, not just classic model risk.
How does model risk guidance like SR 11-7 apply to AI solutions, and where does it fall short?
What they are checking: Whether they know existing bank model risk rules and can see where AI needs more.
What would you monitor once an AI model or tool is in production?
What they are checking: Whether they think about drift, output quality, misuse and incidents after launch.
How would you build an inventory of AI use across a large firm where teams are adopting tools on their own?
What they are checking: Whether they know you can't control what you can't see and have a plan to find it.
How do emerging rules like the EU AI Act affect how a global bank should govern AI?
What they are checking: Whether they follow regulatory developments and can turn them into control requirements.
Practice this interview out loud.
Offer builds a real interview for this exact role at Northern Trust from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.
Practice this out loudThe full job description
As published by Northern Trust.