Senior GRC Risk Analyst (AI)

Location: Remote in the United States; listed location: Creve Coeur, MO

Compensation range: $100,000–$120,000 total compensation

Company

Cyera builds data security and AI trust infrastructure that helps enterprises adopt AI securely.

What you will do

• Design and document the enterprise risk management methodology, including taxonomy, scoring, risk appetite, tolerance thresholds, treatment options, ownership, escalation, and governance cadence.
• Own the enterprise risk register through identification, assessment, treatment, monitoring, acceptance, and closure.
• Run recurring risk assessments and workshops, track remediation plans and due dates, and map risks to controls, policies, audits, vendor risks, and incidents.
• Produce risk reports, dashboards, top-risk summaries, trends, and KRIs for the GRC Manager, CISO, governance committees, executives, audits, customer reviews, and leadership updates.
• Automate risk intake, scoring, and reporting using GRC tooling, Jira, spreadsheets, and simple workflows.
• Integrate risk management with TPRM, vulnerability management, incident response, AI governance, and change management; train risk owners and create reusable playbooks.

Requirements

• 3–5 years of experience in GRC, IT risk, information security risk, or enterprise risk management.
• Hands-on experience building or significantly maturing a risk register and risk assessment process.
• Working knowledge of at least two of ISO 27001, NIST CSF, NIST 800-30, NIST 800-53, or SOC 2.
• Strong understanding of risk scoring, risk appetite, treatment, and acceptance, with practical judgment in applying them.
• Experience mapping risks to controls and supporting external audits.
• Ability to conduct risk discussions with engineers and executives and hold owners accountable without slowing the business.
• Clear, concise writing and reporting skills.
• Comfort working in a fast-moving SaaS or cloud environment with changing priorities.
• Bachelor's degree in a related field or equivalent experience.

Nice to have

• CRISC, CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or ISO 31000 Risk Manager certification.
• Experience with GRC platforms such as Anecdotes, Drata, Vanta, ServiceNow IRM, or Archer, and Jira workflows.
• Exposure to AI risk management, ISO 42001, or the EU AI Act.
• Familiarity with PCI DSS, FedRAMP, C5, or ENS.
• Experience at a security or data security vendor.
• Data privacy and protection experience.

Culture & Benefits

• Remote work with office setup reimbursement.
• Unlimited PTO, paid holidays, and sick time.
• Health, vision, and dental insurance.
• Life, short-term, and long-term disability insurance.
• Standard benefits and equity package, with potential merit increases.