Information Risk Analyst – AI

Title:

Information Risk Analyst – AI

Duration: 12 Months – (Possible Extensions)

Location:

Portland, OR – Remote

Work Hours:

8-5 PST

• The AI Information Risk Analyst will be responsible for identifying, evaluating, and mitigating risks associated with the use of generative AI technologies in our organization. This role requires a blend of technical expertise, analytical skills, and strong ethical judgment to ensure that our AI initiatives are both effective and compliant with regulatory standards.
• 5 IRM team members who perform risk assessments for applications and projects. Standard applications are used in daily tasks
• Will be supporting the analysis of AI products (Anthropic Model Claude 3 and Microsoft Azure GPT
  4) and Company applications (a generative AI application implementation with sub-bots serving specific business areas)
• Above mentioned models are being used within Company internal VPC with no access to internet.
• A security analyst or information risk analyst with exposure, training, and maybe 1-2 projects could meet this need
• Working with project team analyzing use cases for AI implementation. This person will embed with the ChatAI project team daily to understand the security needs for the upcoming roadmap items and will be a liaison to communicate any security requirements.

• Conduct comprehensive risk assessments of generative AI systems, identifying potential vulnerabilities and threats.
• Collaborate with cross-functional teams to design and implement robust AI security measures.
• Ensure compliance with relevant legal, regulatory, and industry standards related to AI and data privacy.
• Develop and maintain risk management frameworks and policies specific to AI applications.
• Perform regular audits and assessments to monitor the effectiveness of risk mitigation strategies.
• Provide expert guidance on AI ethics and responsible AI practices.
• Prepare detailed reports and presentations on risk assessment findings and recommendations for senior management.
• Stay updated with the latest advancements in AI, cybersecurity, and risk management practices.

• Utilities experience not required but good to have.
• Education requirements (experience in lieu of degree):
  Any AI certifications.
• Certification requirements (any preferences): CIAP (nice to have).
• How many years of experience are you looking for? 5-10 years of risk experience, 2 years AI.

• Understanding of AI/ML concepts, algorithms, and models.
• In-depth familiarity with cybersecurity principles and practices.
• Understanding of IT infrastructure, cloud platforms (AWS, Azure, Google Cloud), and their security protocols.

• Ability to think analytically and critically about potential risks.
• Ability to work effectively with cross-functional teams, including data scientists, IT professionals, legal advisors, and business leaders.
• Strong sense of ethics and responsibility regarding AI deployment and its societal impacts.