Sr. GRC Risk Analyst
Core
Design and operate the enterprise risk register and risk management framework for an AI security company, translating technical risks into business decisions for leadership.
Role type
Senior GRC Risk Analyst (Enterprise Risk)
Builds
Enterprise risk register, risk management methodology, and governance cadence
Domain
Cybersecurity / AI Governance / Enterprise Risk Management
Required skills
Enterprise risk management, risk register lifecycle, risk scoring and appetite, framework alignment (ISO/NIST/SOC2), audit support, stakeholder management, technical risk translation
Preferred skills
GRC platforms (Anecdotes, Drata, Vanta, ServiceNow, Archer), AI risk management (ISO 42001, EU AI Act), TPRM integration, data privacy
Technologies
Jira, GRC platforms, spreadsheets
Responsibilities
Design risk taxonomy and scoring models; own the full risk lifecycle from identification to closure; produce risk reporting and dashboards for executives; run risk workshops with control owners; map risks to controls and incidents; automate risk intake and reporting workflows
Seniority
Senior, hands-on IC