AI Risk & Compliance Analyst (GRC)

TL;DR

AI Risk & Compliance Analyst (GRC): Leading day-to-day risk management operations and AI governance for an enterprise-scale health-tech environment with an accent on cybersecurity risk assessments and AI compliance frameworks. Focus on implementing controls for LLM integrations, managing AI vendor risks, and ensuring alignment with the EU AI Act and NIST standards.

Location: On-site in Boston, MA (Relocation possible)

Salary: $100,000 - $140,000

Company

A high-growth health and fitness wearable company focused on human performance.

What you will do

• Lead day-to-day GRC operations, focusing on cybersecurity and AI risk assessments.
• Develop and refine AI compliance controls aligned with ISO/IEC 42001, NIST AI RMF, and the EU AI Act.
• Execute third-party risk assessments for AI vendors, LLM platforms, and AI APIs.
• Draft and maintain AI-specific GRC policies, standards, and procedures.
• Collaborate with Legal, Security, and Product teams to reduce enterprise risk.
• Report on AI risk metrics and trends to leadership via dashboards.

Requirements

• Experience performing governance or risk assessments for AI/ML systems, including LLMs and AI agents.
• Ability to translate technical risks like prompt injection and data poisoning into governance standards.
• Proficiency in mapping risks to frameworks such as ISO/IEC 42001, GDPR, and PCI DSS.
• Strong understanding of AI data governance, including training data lineage and human oversight.
• Bachelor's degree in Information Security, Computer Science, or a related field.
• Must be based in or able to relocate to Boston, MA.

Culture & Benefits

• Competitive base salary and meaningful equity packages.
• Comprehensive benefits package.
• Opportunity to work in a fast-paced, high-growth environment.
• Inclusive culture valuing character as much as professional experience.