AI governance: companies’ new strategic role in the face of regulations and risks

The expansion of artificial intelligence in companies goes beyond the development of models and task automation. It is now necessary to define how the technology will be used, which risks need to be monitored, and who is responsible for decisions based on automated systems. In this context, the role of the AI governance specialist emerges—a professional who connects technology, business, and risk management.

What is the role of an AI governance specialist?

The specialist helps create rules, processes, and control mechanisms for the use of artificial intelligence within an organization. Their work includes identifying risks, monitoring the application of internal policies, and verifying whether systems are used responsibly and in compliance with legal requirements.

In practice, this may involve assessing whether a generative tool can process confidential documents, checking whether a candidate selection system poses discrimination risks, or establishing criteria for reviewing responses produced by AI models.

Governance is not limited to preventing problems. It also defines in which situations the technology can be adopted, which controls are necessary, and how to monitor its results.

A 2025 report by the International Association of Privacy Professionals (IAPP) identified difficulties in finding qualified professionals in AI governance. The survey also pointed out that the role requires knowledge that combines artificial intelligence, risk management, compliance, and interpretation of legal requirements.

What skills are necessary to work in this field?

There is no single educational path for this field. The profile sought depends on the responsibilities of the position and the company’s structure. Technology professionals can focus on the technical evaluation of systems, while people with experience in law, compliance, privacy, or risk management contribute to policies and controls.

Relevant skills include understanding how AI models work, identifying risks, protecting data, interpreting regulations, and the ability to transform technical and legal requirements into procedures applicable to the business.

Communication is also essential. The specialist needs to explain risks and limitations to technical teams, legal departments, and leadership.

How to develop AI skills for work?

Governance depends not only on specialists but also on professionals who understand how the technology works and its limitations. Knowing basic AI concepts, being able to evaluate responses, and understanding the risks of sharing information are starting points for those who wish to participate in these decisions.

What is the impact of regulation on governance?

Regulation is one of the factors that explain the importance of the topic. In the European Union, the AI Act imposes obligations related to the development and use of artificial intelligence systems, including specific requirements for applications classified as high-risk.

Article 9 of the European legislation, for example, provides for a continuous risk management process for these systems, with identification, assessment, and adoption of measures to reduce potential harm. The legislation also requires actions to increase AI literacy among employees who use or operate these systems on behalf of organizations.

Another reference is the AI Risk Management Framework from the U.S. National Institute of Standards and Technology (NIST). The document organizes risk management into four functions: govern, map, measure, and manage. This structure can guide organizations in creating processes to evaluate and monitor their artificial intelligence systems.

These references show that governance is not an isolated task for the technology department. It can involve different areas of the company, depending on the type of system, the risks involved, and the applicable obligations.