Senior AI Risk Analyst (AI GRC)

‼️‼️🆕 Senior AI Risk Analyst (Remote)

The Senior AI Risk Analyst operates within the Information Security function as a core contributor to the enterprise AI GRC Program, responsible for assessing and managing AI, data, privacy, and security risks across the full lifecycle of AI-enabled capabilities. The role applies structured, standards-based risk and impact assessment methodologies aligned to ISO/IEC 42001, the EU AI Act, and NIST AI RMF including evaluation of risks to the organization, individuals, and fundamental rights.

As a Senior AI Risk Analyst, you will
Conduct AI, security, privacy, and data risk assessments across the AI lifecycle using structured methodologies (identification, analysis, evaluation, scoring, and treatment)
Perform AI impact assessments, evaluating potential impacts to individuals, safety, and fundamental rights, and support risk classification of AI systems
Identify and assess AI-specific risks (e.g., bias, explainability, data quality, model behavior), including control gaps, residual risk, and treatment options
Apply and evaluate controls aligned to internal policy, ISO/IEC 42001, and regulatory requirements, ensuring risks are effectively mitigated
Embed governance requirements into AI use case intake, design, deployment, and monitoring through partnership with cross-functional stakeholders
Maintain AI system inventory and intake data to support consistent risk assessment and regulatory alignment
Produce and maintain traceable, audit-ready documentation linking risks, controls, decisions, and outcomes
Support AI conformity and regulatory readiness, including preparation of documentation and evidence for internal and external review
Continuously monitor AI systems for changes in risk (e.g., model drift, new data, evolving use), triggering reassessment and control updates
Provide clear, actionable risk insights and recommendations to technical teams, business stakeholders, and governance forums
 
About you
Bachelor’s degree in Computer Science, Information Systems, Risk Management, or related field, or equivalent experience
Previous experience conducting structured risk assessments, with demonstrated use of formal methodologies (risk identification, analysis, evaluation, scoring, treatment)
Hands-on experience performing AI risk and/or AI impact assessments, including evaluation of organizational, individual, and regulatory risk
Proven ability to identify control gaps, evaluate control effectiveness, and define risk treatment and residual risk decisions
Working knowledge of AI governance and risk frameworks, including ISO/IEC 42001, NIST AI RMF, and ISO/IEC 27001/27005
Familiarity with EU AI Act concepts, including risk classification, high-risk systems, and core regulatory expectations (e.g., transparency, human oversight)
Experience in a global, regulated environment, with exposure to privacy, data protection, and cross-border requirements
Ability to translate technical and regulatory risk into clear, actionable business insights
Demonstrated ability to work cross-functionally across Security, Privacy, Legal, Compliance, Technology, and Business teams
Experience implementing or supporting AI governance programs and lifecycle-based risk management
Experience with AI risk classification, impact assessment, or regulatory alignment related to EU AI Act or similar frameworks
Experience producing audit-ready documentation and evidence supporting risk, controls, and governance decisions
Familiarity with AI-specific risks, including bias, explainability, data quality, model drift, and system robustness
Experience supporting conformity assessment or regulatory readiness activities
Relevant certifications (e.g., ISO/IEC 42001, ISO/IEC 27001, CISSP, CISM, CRISC, AIGP)
Demonstrated governance-first mindset and ability to operate in evolving regulatory environments
 
What we offer you