Senior Risk Analyst – Security & AI Risk Management

About the role

AlphaSense is building a quantitative, AI‑augmented security risk management program and needs a senior professional to design, implement and mature the function. You will create a living risk framework that spans information security, AI and operational risk, turning data into actionable insights for engineers and executives.

Key responsibilities

• Design and implement a structured risk management program, including taxonomy, scoring methodology, risk appetite and escalation thresholds aligned with ISO 27005, NIST RMF or ISO 31000.
• Own and continuously update the enterprise risk register, leading workshops with business, engineering and legal stakeholders.
• Leverage AI tools to monitor threat intelligence, automate risk narrative drafting and surface emerging risks.
• Support third‑party risk management by contributing to vendor assessments, scoring and documentation.
• Identify and assess AI‑related risks such as model bias, data privacy, explainability and compliance with ISO 42001, NIST AI RMF and the EU AI Act.
• Produce executive‑ready risk reports, dashboards and summaries that translate technical findings into business impact.
• Provide cross‑functional risk advisory on new technology adoption, process improvements and remediation activities.

Required profile

• 6+ years experience in GRC, information security, risk management or IT audit, preferably in a SaaS or cloud‑native environment.
• Strong understanding of security and compliance frameworks (SOC 2, ISO 27001, NIST CSF 2.0, CIS Controls) and working knowledge of AI‑specific frameworks (ISO 42001, NIST AI RMF).
• AI‑native mindset: regular use of LLMs, agents or automation for analysis, drafting and workflow automation.
• Proficiency with GRC platforms such as Drata, Vanta, AuditBoard or ServiceNow GRC.
• Familiarity with cloud environments (AWS, Azure, GCP) and related security tooling (CSPM, SIEM, identity platforms).
• Experience supporting external audits, evidence collection and control walkthroughs.

Required skills

• SOC 2, ISO 27001, NIST CSF 2.0, CIS Controls
• ISO 42001, NIST AI RMF
• Drata, Vanta, AuditBoard, ServiceNow GRC
• AWS, Azure, Google Cloud Platform
• CSPM, SIEM, identity‑management platforms
• GDPR, CCPA/CPRA compliance