Risk Analyst – AI Technology Risk Management

Job Summary

CrossCountry is seeking a Risk Analyst to support its Technology Risk Management team in evaluating AI tools against an established AI risk assessment framework. The resource will work through an existing backlog of AI tools, assess inherent risks, evaluate control effectiveness, determine residual risk, and identify remediation steps required to achieve an acceptable risk posture.

Key Responsibilities

• Partner with the Technology Risk Management team to apply the organization’s AI risk framework across various AI tools.
• Assess and document inherent risks associated with AI applications, platforms, and use cases.
• Evaluate the design and effectiveness of existing controls.
• Determine residual risk after considering applicable controls and mitigation measures.
• Identify control gaps, risk exposures, and potential compliance concerns.
• Develop remediation recommendations and define a clear path-to-green for identified risks.
• Work through the existing backlog of AI tools and maintain accurate assessment documentation.
• Collaborate with technology, cybersecurity, compliance, governance, and business teams.
• Track remediation actions, outstanding issues, risk acceptance, and assessment status.
• Prepare risk assessment reports and communicate findings to relevant stakeholders.

Required Qualifications

• 7–10 years of relevant experience in technology risk management, IT risk, cybersecurity risk, or a related discipline preferred.
• Experience conducting risk assessments and evaluating control effectiveness.
• Understanding of inherent risk, residual risk, control gaps, and remediation planning.
• Strong analytical, documentation, and stakeholder communication skills.
• Ability to assess technical tools and translate findings into actionable risk recommendations.
• Experience working in structured risk management or governance environments.

Preferred Qualifications

• Exposure to AI governance, AI risk management, or AI assessment frameworks.
• Familiarity with responsible AI, data privacy, cybersecurity, and regulatory risk considerations.
• Experience with risk registers, control frameworks, remediation tracking, or governance, risk, and compliance (GRC) processes.