Sr. Risk Management Analyst (AI)

Location: Cambridge, Massachusetts; U.S. persons only due to U.S. export control requirements

Salary: $145,900–$234,200 annually, plus potential discretionary bonus, incentive compensation, or equity.

Company

hirify.global develops mRNA technology, medicines, and digital capabilities within a regulated life sciences environment.

What you will do

• Identify, assess, monitor, and report technology, cybersecurity, digital, AI, automation, third-party, and GxP-related risks.
• Conduct risk assessments covering control effectiveness, residual risk, issue severity, remediation needs, and risk treatment recommendations.
• Partner with technology, cybersecurity, quality, privacy, legal, business, and other stakeholders to validate risks and controls and align remediation plans.
• Support control evaluations and issue management by documenting gaps, tracking action plans, and escalating risks or delays.
• Maintain risk data and prepare metrics, dashboards, governance reports, and executive-ready summaries.
• Document requirements, decision logic, evidence needs, escalation points, and human oversight for AI, automation, and agentic workflows.

Requirements

• 5+ years of experience in cybersecurity risk management, technology risk, enterprise risk, IT controls, compliance, or GRC.
• Experience with risk assessments, control evaluations, issue management, remediation tracking, risk reporting, and governance activities.
• Hands-on experience in a GxP-regulated environment is required.
• Strong written and verbal communication skills, with the ability to explain cybersecurity risks and control expectations to technical and non-technical stakeholders.
• Experience using AI to improve risk analysis, documentation, reporting, workflow management, or stakeholder communications.
• Must qualify as a U.S. person under U.S. export control laws; non-U.S. persons are not eligible for this position.

Nice to have

• Four-year degree or equivalent experience in information systems, cybersecurity, risk management, or a related field.
• Familiarity with NIST CSF, ISO 27001, CIS Controls, COBIT, ITIL, or similar frameworks.
• Experience with OneTrust, ServiceNow, Jira, Power BI, Excel, SharePoint, or similar tools.
• Experience with risk registers, issue tracking, control assessments, dashboards, governance forums, and executive reporting.

Culture & Benefits

• Healthcare and voluntary benefit programs.
• Fitness, mindfulness, and mental health support.
• Family planning benefits, including fertility, adoption, and surrogacy support.
• Paid time off including vacation, volunteer days, sabbatical, global recharge days, and year-end shutdown.
• Savings and investment programs, plus location-specific benefits.