Governance, Risk, Compliance & Privacy Analyst

Role Overview: As a Governance, Risk, Compliance & Privacy Analyst in the Technology & AI department, your primary responsibility will be to ensure compliance with ISO/IEC 42001 AI Management System standards. You will also be involved in internal audits, enterprise risk assessments, secure SDLC & ITSM control reviews, API security audits, privacy impact assessments, and providing governance, compliance, and audit support. Key Responsibilities: - Implement, operate, and maintain an ISO/IEC 42001 aligned AI Management System (AIMS). - Maintain clause-to-control and clause-to-evidence mappings. - Plan and conduct internal audits across ISO/IEC 42001, AI governance, and ITSM processes. - Conduct enterprise risk assessments for AI, technology, SDLC, cyber, and third-party risks. - Assess architecture, threat models, CI/CD, and ITSM processes for secure SDLC & ITSM control reviews. - Review authentication, authorization, validation, rate limiting, and data exposure in API security & layer-wise technical audits. - Conduct Privacy Impact Assessments (PIAs/DPIAs) and maintain privacy risk registers. - Operate governance and evidence management processes and support client audits and regulatory inquiries. Qualifications Required: - 3 years of experience in governance, risk, compliance, audit, technology, ITSM, or privacy roles. - Experience in regulated or global enterprise environments. - Hands-on experience with audits, risk assessments, or control testing. - Proficiency in ISO-based management systems (ISO/IEC 42001 preferred). - Strong understanding of internal audit execution, technology, SDLC, and ITSM risk assessment, API security, configuration and access control auditing, and privacy impact assessment fundamentals. - Knowledge of AI/ML risks and strong documentation skills. (Note: Additional details about the company were not provided in the job description.) Role Overview: As a Governance, Risk, Compliance & Privacy Analyst in the Technology & AI department, your primary responsibility will be to ensure compliance with ISO/IEC 42001 AI Management System standards. You will also be involved in internal audits, enterprise risk assessments, secure SDLC & ITSM control reviews, API security audits, privacy impact assessments, and providing governance, compliance, and audit support. Key Responsibilities: - Implement, operate, and maintain an ISO/IEC 42001 aligned AI Management System (AIMS). - Maintain clause-to-control and clause-to-evidence mappings. - Plan and conduct internal audits across ISO/IEC 42001, AI governance, and ITSM processes. - Conduct enterprise risk assessments for AI, technology, SDLC, cyber, and third-party risks. - Assess architecture, threat models, CI/CD, and ITSM processes for secure SDLC & ITSM control reviews. - Review authentication, authorization, validation, rate limiting, and data exposure in API security & layer-wise technical audits. - Conduct Privacy Impact Assessments (PIAs/DPIAs) and maintain privacy risk registers. - Operate governance and evidence management processes and support client audits and regulatory inquiries. Qualifications Required: - 3 years of experience in governance, risk, compliance, audit, technology, ITSM, or privacy roles. - Experience in regulated or global enterprise environments. - Hands-on experience with audits, risk assessments, or control testing. - Proficiency in ISO-based management systems (ISO/IEC 42001 preferred). - Strong understanding of internal audit execution, technology, SDLC, and ITSM risk assessment, API security, configuration and access control auditing, and privacy impact assessment fundamentals. - Knowledge of AI/ML risks and strong documentation skills. (Note: Additional details about the company were not provided in the job description.)