GRC & AI Risk Analyst

About the opportunity

Join Northstar Digital Assurance as a GRC & AI Risk Analyst to support enterprise governance, cybersecurity risk management, regulatory compliance, AI governance, and technology control assessments across modern digital environments.

What you will do

• check_circle Perform cybersecurity, technology, and AI risk assessments and document identified risks, control gaps, remediation actions, and residual risk.
• check_circle Support compliance initiatives involving frameworks and standards such as NIST CSF, NIST AI RMF, ISO 27001, SOC 2, GDPR, and applicable industry regulations.
• check_circle Evaluate governance and control requirements for AI systems, including data privacy, model risk, transparency, access controls, human oversight, and responsible AI practices.
• check_circle Assist with internal audits, control testing, evidence collection, policy reviews, risk registers, and compliance reporting for business and technology stakeholders.
• check_circle Conduct third-party and vendor risk assessments covering cybersecurity posture, data handling practices, regulatory requirements, and AI-related risks.
• check_circle Partner with security, legal, engineering, data, and business teams to track remediation plans and improve enterprise risk and compliance processes.

What we are looking for

• arrow_circle_right Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related field, or equivalent practical experience.
• arrow_circle_right Understanding of Governance, Risk, and Compliance concepts including risk assessments, security controls, policies, audits, and regulatory compliance.
• arrow_circle_right Working knowledge of frameworks such as NIST CSF, NIST AI RMF, ISO 27001, SOC 2, COBIT, or similar governance standards.
• arrow_circle_right Familiarity with AI governance, responsible AI, data privacy, third-party risk, or emerging technology risk concepts.
• arrow_circle_right Strong analytical, documentation, communication, and stakeholder management skills.

Skills & Tech Stack