GRC Analyst – AI Governance & Risk Management

About the opportunity

Join Deloitte as a GRC Analyst specializing in AI Governance, Risk Management, and Regulatory Compliance. Help organizations identify technology risks, strengthen security controls, and implement responsible AI governance frameworks.

What you will do

• check_circle Conduct IT risk assessments, identify control gaps, and recommend appropriate risk mitigation strategies.
• check_circle Support AI governance assessments by evaluating AI systems for security, privacy, transparency, and ethical risks.
• check_circle Assist in implementing and monitoring compliance frameworks, including NIST, ISO 27001, SOC 2, and GDPR.
• check_circle Maintain risk registers, compliance documentation, audit evidence, and governance reports.
• check_circle Use AI-powered GRC tools and automation platforms to streamline compliance monitoring and risk reporting.
• check_circle Collaborate with cybersecurity, legal, IT audit, and data governance teams to improve enterprise risk management.

What we are looking for

• arrow_circle_right Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Business Administration, or a related field.
• arrow_circle_right Knowledge of Governance, Risk, and Compliance (GRC) principles and enterprise risk management practices.
• arrow_circle_right Understanding of security and compliance frameworks such as NIST, ISO 27001, SOC 2, or GDPR.
• arrow_circle_right Familiarity with AI governance, responsible AI principles, data privacy, and AI-related risk management.
• arrow_circle_right Basic experience with risk assessment, audit documentation, compliance reporting, or GRC platforms is preferred.

Skills & Tech Stack