AI Risk and Compliance Analyst; Hybrid - NYC​/Charlotte, NC

Overview

Our Customer is a leading global, diversified information, services and media company with more than 360 businesses. Its major interests include various financial services, medical information and services businesses, ownership in cable television networks; 33 television stations; 24 daily and 52 weekly newspapers; digital services businesses; and nearly 250 magazines around the world.

Our Customer is seeking a AI Risk and Compliance Analyst on a contract basis to support the intake, assessment, documentation, and ongoing governance of their AI use cases. This role is hybrid in NYC or Charlotte, NC
.

• Operate and improve the AI use case intake process, including triage, risk categorization, stakeholder routing, approval tracking, and follow‑up.
• Conduct AI risk and compliance reviews for proposed and existing AI use cases.
• Evaluate data use, privacy, security, third‑party risk, regulatory exposure, business impact, and control requirements.
• Review AI‑enabled tools, platforms, vendors, and processes for risks related to confidential data, sensitive data, automated decision‑making, transparency, human oversight, intellectual property, bias, accuracy, and regulatory obligations.
• Maintain and improve the AI use case inventory, including owners, vendors, data types, risk ratings, approval status, required controls, exceptions, and review cadence.
• Translate AI regulatory, privacy, security, and compliance expectations into intake questions, risk assessment criteria, control requirements, and decision records.
• Support alignment with AI governance standards, regulatory expectations, and sector‑specific guidance.
• Partner with Legal, Privacy, Security, Procurement, Technology, and business teams to document approvals, mitigations, exceptions, remediation actions, and ongoing monitoring requirements.
• Support third‑party AI risk reviews, including evaluation of vendor AI capabilities, data processing practices, contractual considerations, and governance commitments.
• Develop and improve AI governance artifacts, including intake forms, review checklists, risk rating criteria, process documentation, decision templates, and reporting metrics.
• Support reporting on AI governance activities, including intake volume, review cycle time, risk themes, open issues, remediation status, exceptions, and regulatory alignment.

• 5+ years of experience in governance, risk, compliance, privacy, information security, technology risk, third‑party risk, model risk, audit, or a related field.
• 2+ years of direct experience in AI governance, responsible AI, AI risk assessment, AI compliance, model risk management, machine learning governance, or emerging technology risk.
• Experience reviewing AI use cases involving generative AI tools, SaaS platforms, machine learning models, automated workflows, analytics, or vendor‑provided AI capabilities.
• Experience evaluating AI risks, including data leakage, confidential data exposure, privacy impact, intellectual property concerns, hallucination or accuracy risk, bias, automated decision‑making, transparency, vendor dependency, and human oversight.
• Working knowledge of AI governance frameworks, standards, or regulatory guidance such as NIST AI RMF, ISO/IEC 42001, EU AI Act concepts, OECD AI principles, privacy regulations, or sector‑specific AI guidance.
• Strong understanding of GRC fundamentals, including risk assessment, control evaluation, issue tracking, remediation management, policy exceptions, audit‑ready documentation, and stakeholder approvals.
• Familiarity with security and compliance frameworks such as NIST CSF, NIST 800‑53, ISO 27001, COBIT, SOC 2, PCI, HIPAA, or SOX.
• Experience creating or improving intake forms, risk assessment templates, control mappings, decision records, process documentation, or governance workflows.
• Ability to work independently, manage multiple concurrent reviews, and produce high‑quality documentation with limited supervision.
• Strong written and verbal communication skills with the ability to explain AI risk and compliance concepts to non‑specialist stakeholders.

• Experience in standing up or improving an…