Senior AI Risk Analyst

Описание вакансии

*‼️**‼️**🆕* Senior AI Risk Analyst (Remote)

The Senior AI Risk Analyst operates within the Information Security function as a core contributor to the enterprise AI GRC Program, responsible for assessing and managing AI, data, privacy, and security risks across the full lifecycle of AI-enabled capabilities. The role applies structured, standards-based risk and impact assessment methodologies aligned to ISO/IEC 42001, the EU AI Act, and NIST AI RMF including evaluation of risks to the organization, individuals, and fundamental rights.

As a Senior AI Risk Analyst, you will

Conduct AI, security, privacy, and data risk assessments across the AI lifecycle using structured methodologies (identification, analysis, evaluation, scoring, and treatment)

Perform AI impact assessments, evaluating potential impacts to individuals, safety, and fundamental rights, and support risk classification of AI systems

Identify and assess AI-specific risks (e.g., bias, explainability, data quality, model behavior), including control gaps, residual risk, and treatment options

Apply and evaluate controls aligned to internal policy, ISO/IEC 42001, and regulatory requirements, ensuring risks are effectively mitigated

Embed governance requirements into AI use case intake, design, deployment, and monitoring through partnership with cross-functional stakeholders

Maintain AI system inventory and intake data to support consistent risk assessment and regulatory alignment

Produce and maintain traceable, audit-ready documentation linking risks, controls, decisions, and outcomes

Support AI conformity and regulatory readiness, including preparation of documentation and evidence for internal and external review

Continuously monitor AI systems for changes in risk (e.g., model drift, new data, evolving use), triggering reassessment and control updates

Provide clear, actionable risk insights and recommendations to technical teams, business stakeholders, and governance forums

About you

Bachelor’s degree in Computer Science, Information Systems, Risk Management, or related field, or equivalent experience

Previous experience conducting structured risk assessments, with demonstrated use of formal methodologies (risk identification, analysis, evaluation, scoring, treatment)

Hands-on experience performing AI risk and/or AI impact assessments, including evaluation of organizational, individual, and regulatory risk

Proven ability to identify control gaps, evaluate control effectiveness, and define risk treatment and residual risk decisions

Working knowledge of AI governance and risk frameworks, including ISO/IEC 42001, NIST AI RMF, and ISO/IEC 27001/27005

Familiarity with EU AI Act concepts, including risk classification, high-risk systems, and core regulatory expectations (e.g., transparency, human oversight)

Experience in a global, regulated environment, with exposure to privacy, data protection, and cross-border requirements

Ability to translate technical and regulatory risk into clear, actionable business insights

Demonstrated ability to work cross-functionally across Security, Privacy, Legal, Compliance, Technology, and Business teams

Experience implementing or supporting AI governance programs and lifecycle-based risk management

Experience with AI risk classification, impact assessment, or regulatory alignment related to EU AI Act or similar frameworks

Experience producing audit-ready documentation and evidence supporting risk, controls, and governance decisions

Familiarity with AI-specific risks, including bias, explainability, data quality, model drift, and system robustness

Experience supporting conformity assessment or regulatory readiness activities

Relevant certifications (e.g., ISO/IEC 42001, ISO/IEC 27001, CISSP, CISM, CRISC, AIGP)

Demonstrated governance-first mindset and ability to operate in evolving regulatory environments

Откликнуться *‼️*‼️**