Cybersecurity Governance Analyst

Cybersecurity Governance Analyst

We are seeking a Cybersecurity Governance Analyst to support the development and maturity of an enterprise AI governance and cybersecurity program. This role will assist with AI security standards, risk assessments, vendor reviews, compliance documentation, and responsible technology adoption. The ideal candidate will have experience in cybersecurity, GRC, privacy, audit, technology risk, or information security, with exposure to AI governance, generative AI, machine learning, or emerging technology risk preferred.

Key Responsibilities:

• Support the development of AI governance, security, and risk management processes.
• Perform security, privacy, compliance, and technology risk assessments for AI tools and solutions.
• Evaluate AI use cases for cybersecurity, privacy, legal, ethical, operational, and compliance risks.
• Review vendor security documentation, data-handling practices, privacy controls, and contractual security requirements.
• Develop and maintain AI security standards, procedures, guidelines, and governance documentation.
• Assist with maintaining an inventory of AI systems, tools, vendors, models, and use cases.
• Recommend controls to mitigate risks related to AI data use, model outputs, third-party tools, and sensitive information.
• Collaborate with Information Security, GRC, Legal, Privacy, Procurement, Enterprise Architecture, and business stakeholders.
• Monitor emerging AI threats, vulnerabilities, regulations, and industry best practices.
• Prepare reports, briefings, documentation, and recommendations for leadership.

Requirements:

Required Qualifications:

• Bachelor's degree in Cybersecurity, IT, Computer Science, Information Systems, Risk Management, Data Science, Business Administration, or a related field.
• 3–5+ years of experience in cybersecurity, information security, technology risk, GRC, privacy, audit, or a related area.
• Knowledge of cybersecurity risk assessments, security controls, governance processes, and compliance practices.
• Understanding of AI, machine learning, generative AI, large language models, or emerging technology concepts.
• Experience reviewing systems, applications, vendors, or technology solutions for security, privacy, compliance, or operational risk.
• Strong analytical, documentation, communication, and stakeholder collaboration skills.

Preferred Qualifications:

• Experience with AI governance, responsible AI, AI security, or emerging technology risk.
• Experience conducting vendor risk assessments or third-party security reviews.
• Familiarity with cybersecurity, privacy, AI governance, or risk management frameworks.
• Experience in government, public sector, critical infrastructure, or highly regulated environments.
• Relevant certifications in cybersecurity, privacy, audit, risk management, cloud security, or AI governance are a plus.