Sr AI Governance & Risk Analyst

Required Skills & Experience

• Bachelor's degree in Information Security, Information Systems, Business Administration, Public Administration, Risk Management, or related fields.
• Experience can be concurrent:
• Six (6) years of experience in cybersecurity governance, risk management, compliance, audit, privacy, or information security.
• Three (3) years of experience conducting technology risk assessments, security reviews, compliance reviews, or governance activities.
• Experience developing policies, standards, procedures, frameworks, or governance documentation.
• Experience preparing executive-level reports, risk assessments, recommendations, and briefing materials.
• Experience facilitating meetings and working with technical and non-technical stakeholders to achieve consensus.
• Demonstrated ability to independently manage multiple projects and priorities.
• Familiarity with prominent AI governance frameworks, specifically the NIST AI Risk Management Framework (AI RMF) and/or ISO/IEC 42001 (Artificial Intelligence Management System).
• Practical experience operationalizing and maintaining an AI Bill of Materials (AIBOM) framework, partnering with engineering teams to continuously track model lineage, datasets, and third-party dependencies.
• Industry certifications such as CISSP, CRISC, CISM, CGRC, CDPSE, or equivalent.

Nice to Have Skills & Experience

• Experience supporting AI governance, AI risk management, or responsible AI programs.
• Familiarity with NIST Cybersecurity Framework, ISO 27001, COBIT, or similar governance frameworks.
• Experience evaluating emerging technologies, cloud services, or third-party technology solutions.
• Hands-on experience assessing commercial SaaS and enterprise AI solutions (e.g., Copilots, API integrations) to ensure vendor data-handling practices align with corporate privacy and confidentiality mandates.

Job Description

Insight Global is seeking a Senior AI Governance & Risk Analyst to support our client in the government sector. This role supports the Information Security Emerging Technologies team by developing and operationalizing AI governance programs, security standards, risk assessment processes, and supporting documentation to enable the secure adoption of AI technologies across the enterprise. The individual will help establish and maintain AI governance frameworks, including intake, review, approval, and exception management processes, while managing governance artifacts and approved AI solution inventories. Responsibilities include conducting AI risk assessments, evaluating emerging technologies against regulatory, compliance, legal, privacy, and business requirements, documenting risk decisions, and supporting risk acceptance activities. The role also focuses on creating repeatable governance mechanisms through reusable templates, decision trees, assessment criteria, operational procedures, and guidance for business stakeholders, project teams, and security personnel, while partnering with cross-functional governance and review teams to ensure consistent oversight and risk management of AI initiatives.