Information Security Governance, Risk and Compliance Analyst

Job summary

The role involves enhancing compliance frameworks and managing security risks associated with AI technologies. The analyst will collaborate with security, risk, and engineering teams to ensure safe adoption of innovations while maintaining compliance with industry standards.

Qualifications

• Experience managing and auditing compliance frameworks such as SOC 2, ISO27001, and PCI DSS.
• Knowledge of risk management processes, including vendor security due diligence.
• Practical experience in developing and managing security policies and procedures.
• Understanding of cloud environment risks and the ability to balance security with innovation.
• Familiarity with AI governance frameworks is a plus.

Responsibilities

• Drive compliance efforts for industry standards, ensuring commitments to customers are met.
• Evaluate security risks related to AI and machine learning systems.
• Streamline security assessments for vendors and third-party tools.
• Develop internal standards for AI in line with global regulations.
• Identify opportunities for AI-driven automation in risk management tasks.
• Refresh security policies and public-facing documents.
• Advocate for security awareness across the organization.

Skills

• Strong understanding of compliance frameworks and risk management.
• Ability to implement and manage security policies.
• Pragmatic approach to balancing security and innovation.

Education

• Relevant degree or equivalent experience in information security or a related field.

Tools

• Familiarity with compliance management tools and risk assessment methodologies.