AI Risk & Compliance Analyst

AI Risk & Compliance Analyst | Location: New York, NY or Charlotte, NC | Contract To Hire | Hourly Pay Range: $50-$70 AI Risk & Compliance Analyst role supporting governance, assessment, and oversight of AI initiatives across the enterprise. This hands-on position focuses on AI risk management, responsible AI, and regulatory compliance, with collaboration across Legal, Privacy, Security, Procurement, Technology, and business stakeholders. The work includes managing AI use case intake, performing risk assessments, maintaining governance documentation, and translating regulatory requirements into practical controls.

Key Responsibilities

• Manage and enhance the AI use case intake and review process, including triage, risk classification, stakeholder routing, approval tracking, and follow-up activities.
• Conduct risk and compliance assessments for proposed and existing AI use cases, evaluating data usage, privacy, security, regulatory obligations, business impact, and required controls.
• Review AI-enabled tools, platforms, vendors, and business processes for risks related to data privacy and confidentiality, intellectual property protection, bias and fairness, model accuracy and hallucination risk, automated decision-making, transparency and explainability, human oversight and accountability, and third-party and vendor risk.
• Maintain and improve the enterprise AI use case inventory, including ownership, vendors, data classifications, risk ratings, approvals, controls, exceptions, and review schedules.
• Translate regulatory, privacy, security, and compliance requirements into practical governance processes, assessment criteria, and control requirements.
• Support alignment with established AI governance frameworks, standards, and emerging regulatory expectations.
• Partner with Legal, Privacy, Security, Procurement, Technology, and business stakeholders to document approvals, mitigations, remediation plans, exceptions, and monitoring activities.
• Support reviews of AI vendors and third-party solutions, including assessment of AI capabilities, data handling practices, contractual considerations, and governance commitments.
• Develop and maintain governance artifacts including intake forms, risk assessment templates, review checklists, decision records, process documentation, and control frameworks.
• Track and report key governance metrics, including intake volumes, review cycle times, risk trends, remediation status, exceptions, and compliance alignment.

Required Qualifications

• 5+ years of experience in Governance, Risk, Compliance (GRC), Information Security, Privacy, Technology Risk, Audit, Third-Party Risk, Model Risk, or a related discipline.
• 2+ years of hands-on experience in AI Governance, Responsible AI, AI Risk Management, AI Compliance, Model Risk Management, Machine Learning Governance, or Emerging Technology Risk.
• Experience assessing AI and Generative AI use cases, including SaaS platforms, machine learning models, automated workflows, analytics solutions, and vendor-provided AI capabilities.
• Strong understanding of AI-related risks, including data leakage and confidential data exposure, privacy implications, intellectual property concerns, model accuracy and hallucinations, bias and fairness, automated decision-making risks, transparency and explainability, and vendor dependency and concentration risk.
• Knowledge of AI governance frameworks and regulatory guidance, including NIST AI Risk Management Framework (AI RMF), ISO/IEC 42001, EU AI Act concepts, and OECD AI Principles.
• Strong foundation in GRC principles, including risk assessments, control evaluations, issue management, remediation tracking, audit readiness, and governance documentation.
• Familiarity with security and compliance frameworks such as NIST CSF, NIST 800-53, ISO 27001, COBIT, SOC 2, PCI-DSS, HIPAA, or SOX.
• Experience developing governance workflows, intake processes, risk assessment methodologies, or compliance documentation.
• Ability to work independently and manage multiple concurrent reviews in a fast-paced environment.
• Excellent written and verbal communication skills, with the ability to explain technical and regulatory concepts to diverse stakeholder groups.

Preferred Qualifications

• Experience designing, implementing, or improving enterprise AI governance programs.
• Experience managing AI system inventories, model inventories, or automated decisioning registries.
• Experience s…