Principal GRC & AI Governance Consultant

About the opportunity

Join American Tech Global LLC as a Principal GRC & AI Governance Consultant helping enterprise clients build scalable cybersecurity, AI risk, compliance, and responsible AI programs.

What you will do

• check_circle Lead enterprise GRC and AI governance engagements, defining governance operating models, risk processes, control structures, and measurable compliance objectives.
• check_circle Conduct complex technology, cybersecurity, AI, privacy, and third-party risk assessments and present prioritized remediation recommendations to senior leadership.
• check_circle Design and implement governance frameworks aligned with NIST CSF, NIST AI RMF, ISO 27001, SOC 2, and applicable regulatory requirements.
• check_circle Develop AI governance practices covering model inventories, risk classification, data governance, human oversight, security controls, responsible AI principles, and ongoing monitoring.
• check_circle Direct audit readiness, control testing, evidence management, remediation programs, and executive reporting for enterprise compliance initiatives.
• check_circle Collaborate with CISO, CIO, legal, privacy, engineering, product, and procurement teams to embed risk management into technology and AI delivery lifecycles.
• check_circle Evaluate and deploy AI-enabled GRC automation for continuous monitoring, control testing, evidence analysis, risk reporting, and compliance workflow optimization.

What we are looking for

• arrow_circle_right 10+ years of progressive experience in GRC, cybersecurity, technology risk, compliance, audit, or enterprise risk management.
• arrow_circle_right Expert-level knowledge of NIST CSF, NIST AI RMF, ISO 27001, SOC 2, security controls, privacy principles, and technology risk management.
• arrow_circle_right Demonstrated leadership experience building or scaling AI governance, responsible AI, model risk, or emerging technology risk programs.
• arrow_circle_right Strong experience with enterprise cloud, cybersecurity architecture, third-party risk, regulatory compliance, and control assurance environments.
• arrow_circle_right Exceptional executive communication, consulting, stakeholder management, and analytical skills with the ability to influence organization-wide decisions.
• arrow_circle_right Hands-on experience with enterprise GRC platforms, compliance automation, continuous controls monitoring, or AI-powered risk management solutions.

Skills & Tech Stack