Senior Risk Analyst

The role

You will design, implement, and mature a risk framework spanning information security, AI, and operational risk. You will own the enterprise risk register and use AI tools to monitor threat landscapes and analyze risk data.

What you will do

• Design and implement a structured risk management program
• Build and maintain the enterprise risk register
• Lead periodic risk identification workshops
• Leverage AI tools to monitor threat intelligence and identify patterns
• Support the TPRM function with vendor risk assessments
• Identify and assess AI-related risks
• Produce executive-ready risk reports, dashboards, and summaries
• Provide cross-functional risk and control guidance

Required qualifications

• 6+ years of experience in GRC, information security, risk management, or IT audit
• Strong understanding of security and compliance frameworks including SOC 2, ISO 27001, NIST CSF 2.0, and CIS Controls
• Working knowledge of ISO 42001 and NIST AI RMF
• AI-native mindset using LLMs, agents, and automation for substantive work
• Proficiency with GRC platforms such as Drata, Vanta, AuditBoard, or ServiceNow GRC
• Familiarity with cloud environments (AWS, Azure, or GCP) and security tooling
• Experience supporting external audits
• Ability to interpret technical controls and translate findings into documentation
• Working knowledge of risk registers, control libraries, and policy governance lifecycles
• Working knowledge of privacy and data protection requirements (GDPR, CCPA/CPRA)
• Strong written communication, analytical thinking, and attention to detail
• 4+ years of hands-on experience in information security risk management or a combined GRC/risk role

Nice to have

• CISA, CRISC, CISM, CISSP, CCSK, or ISO 27001 Lead Auditor/Implementer
• Experience with AI governance frameworks including ISO 42001, NIST AI RMF, EU AI Act, or OECD AI Principles
• Exposure to SOX ITGC cycles
• Privacy program crossover: data mapping, DPIAs, GDPR/CCPA operational compliance
• Scripting or automation experience (Python, JavaScript, or low-code tools)
• Quantitative risk experience: FAIR-style decomposition, Monte Carlo simulation, or loss exceedance analysis
• Experience with AI risk domains: model risk, algorithmic bias, AI system failure modes, agentic system risks
• Familiarity with risk aggregation and BI tooling (Tableau, Looker, Power BI)
• Background in financial services regulatory risk environments (SOX, FFIEC, or equivalent)

About the company

AlphaSense is the AI platform redefining market intelligence and workflow orchestration. The platform combines domain-specific AI with a vast content universe of over 500 million premium business documents.