The Verification, Validation and Internal Audit Specialist is the management owner of REV04: independent assurance that DAEIOR processes and AI-system outcomes are as claimed. Role 1.2 owns conformity readiness (REV03). Role 1.3 runs quality audit of process discipline. Role 2.1 designs validation metrics. This role samples evidence it did not produce and issues an opinion Role 1.1 can Direct from. It does not accept residual risk, and it does not mark its own testing as assured.

Standing duties

• Plan and execute independent assurance of in-scope DAEIOR processes and high-risk systems, using ISO/IEC 33020-style capability thinking where the organisation assesses process capability.
• Keep REV04 structurally separate from REV03 readiness (Role 1.2) and from EST11 quality audit (Role 1.3).
• Rate residual-risk outcomes no higher than L if the only evidence is the risk owner’s own memo (Role 1.4) or a model card.
• Raise ACT03 when assurance finds production already outside appetite or purpose. Raise ACT02 when findings show purpose-in-fact has moved.
• Never accept residual risk, never sign go-live as the product owner, and never assure work this role designed or executed.

Accountable to: Board audit / assurance committee, or AI Governance Lead only where independence is structurally protected

Primary domain: Review REV04 (independent assurance). Must not own the file it assures or accept residual risk.

Linked EN 18286 clauses: 4.4.2, 9.1, 10.1.2

Format: 3 hours of training, EUR 200.