GRC & AI Risk Analyst

About the opportunity

Join American Tech Global LLC as a GRC & AI Risk Analyst supporting enterprise governance, cybersecurity risk management, regulatory compliance, and responsible AI initiatives across modern technology environments.

What you will do

• check_circle Perform cybersecurity, technology, and AI risk assessments and document identified risks, controls, remediation plans, and residual risk.
• check_circle Support implementation and maintenance of governance and compliance frameworks including NIST CSF, ISO 27001, SOC 2, CIS Controls, and related regulatory requirements.
• check_circle Assess AI systems and use cases for governance, privacy, security, model risk, transparency, data protection, and responsible AI considerations.
• check_circle Assist with internal and external audits by collecting evidence, reviewing control effectiveness, documenting findings, and tracking remediation activities.
• check_circle Develop and maintain risk registers, control matrices, compliance documentation, policies, procedures, and executive risk dashboards.
• check_circle Support third-party and vendor risk assessments by evaluating security controls, compliance posture, data handling practices, and technology dependencies.

What we are looking for

• arrow_circle_right 1+ years of experience or relevant hands-on training in Governance, Risk, Compliance, cybersecurity, IT audit, technology risk, or information security.
• arrow_circle_right Working knowledge of frameworks and standards such as NIST CSF, ISO 27001, SOC 2, CIS Controls, COBIT, or similar governance frameworks.
• arrow_circle_right Understanding of AI governance, responsible AI, data privacy, cybersecurity risk, and emerging risks associated with AI-enabled systems.
• arrow_circle_right Ability to perform risk assessments, control reviews, gap analyses, audit evidence collection, and remediation tracking.
• arrow_circle_right Strong analytical, documentation, stakeholder communication, and problem-solving skills with the ability to translate technical risks into business impact.

Skills & Tech Stack