AI Governance Risk & Compliance Analyst

Overview

We are seeking an experienced AI Risk & Compliance Analyst to support the governance, risk assessment, and compliance review of AI initiatives across the organization. This is a hands-on role focused on AI governance, responsible AI practices, regulatory compliance, and risk management. The ideal candidate will help improve AI intake and review processes, assess AI-related risks, maintain governance documentation, and collaborate with cross-functional teams to ensure AI activities align with legal, privacy, security, and regulatory requirements.

Key Responsibilities

• Manage and enhance AI use case intake, triage, risk classification, approvals, and tracking processes.
• Perform risk and compliance assessments for AI and Generative AI use cases.
• Evaluate AI tools, platforms, vendors, and processes for privacy, security, regulatory, intellectual property, bias, transparency, and operational risks.
• Maintain AI governance inventories, including use cases, vendors, risk ratings, approvals, and control requirements.
• Translate regulatory and governance requirements into practical risk assessment criteria and control frameworks.
• Partner with Legal, Privacy, Security, Procurement, Technology, and business teams on reviews, approvals, remediation plans, and ongoing monitoring.
• Support third-party AI risk assessments and vendor governance reviews.
• Develop and maintain AI governance artifacts, workflows, documentation, reporting, and metrics.
• Track and report on AI governance activities, risk trends, remediation efforts, and compliance status.

Required Qualifications

• 5+ years of experience in Governance, Risk & Compliance (GRC), Information Security, Privacy, Technology Risk, Audit, Third-Party Risk, Model Risk, or related fields.
• 2+ years of hands-on experience in AI Governance, Responsible AI, AI Risk Management, AI Compliance, Machine Learning Governance, or Emerging Technology Risk.
• Experience reviewing Generative AI, Machine Learning, SaaS-based AI solutions, automated workflows, and analytics platforms.
• Strong understanding of AI-related risks including:
• Data leakage and confidential data exposure
• Privacy and regulatory compliance
• Intellectual property concerns
• Hallucination and accuracy risks
• Bias and fairness considerations
• Automated decision-making and transparency
• Vendor and third-party AI risks
• Human oversight and governance controls

Preferred Qualifications

• Experience establishing or improving AI governance and review frameworks.
• Experience managing AI use case, model, or automated decisioning inventories.
• Experience working in large, matrixed enterprise environments.
• Familiarity with GRC and workflow tools such as Jira, SharePoint, OneTrust, Archer, MetricStream, or similar platforms.
• Experience creating governance dashboards, executive reporting, KPIs, and operational metrics.
• Relevant certifications preferred: AIGP, CISA, CRISC, CISM, CISSP, CDPSE, ISO 27001, ISO 42001, or equivalent.