AI Governance Risk Analyst

Job Summary

Managing the Managed AI program for clients, the full-time AI Governance Risk Analyst will maintain AI Acceptable Use Policy templates, oversee DNS-layer shadow AI monitoring, and manage Data Processing Agreements while working remotely or from Tucson, AZ.

Key responsibilities

• Maintain AI Acceptable Use Policy templates with industry-specific addenda
• Run DNS-layer shadow AI monitoring and produce monthly AI Usage Reports
• Package quarterly evidence for client audits and insurance reviews

Required qualifications

• 3+ years in IT governance, security GRC, or a comparable risk-analysis role
• Strong written communication and policy-drafting skills
• Familiarity with regulatory frameworks such as HIPAA, SOC 2, and NIST standards
• Comfortable with technical security data, including DNS logs and M365 audit data
• Eligible to work in the U.S