AI Risk & Compliance Analyst

Job Description

Job Description

Robert Half is seeking an experienced AI Risk & Compliance Analyst to support the intake, assessment, documentation, and ongoing governance of AI use cases across the enterprise.

This is a hands-on role for a practitioner with direct experience in AI governance, AI risk assessment, responsible AI controls, and regulatory alignment . The ideal candidate will make an immediate impact by improving AI intake processes, strengthening risk review workflows, and ensuring alignment with evolving legal, privacy, security, and compliance expectations.

Location: Midtown, New York

Schedule: Hybrid – 3 days onsite, 2 days remote

Duration: 6-month contract with potential for full-time conversion

Pay: $65-75/hour

Key Responsibilities

• Manage and enhance the AI use case intake process , including:
• Triage, risk categorization, stakeholder routing, approval tracking, and follow-ups
• Conduct AI risk and compliance reviews for new and existing use cases, including:
• Data usage, privacy, security, third-party risk, regulatory exposure, and business impact
• Evaluate AI-enabled tools, platforms, and vendors for risks related to:
• Confidential/sensitive data, automated decision-making, transparency, human oversight, IP, bias, and accuracy
• Maintain and improve the AI use case inventory , including:
• Ownership, vendors, data types, risk ratings, approvals, required controls, and review cadence
• Translate regulatory and compliance requirements into:
• Intake questions, risk criteria, control requirements, and formal decision documentation
• Partner cross-functionally with:
• Legal, Privacy, Security, Procurement, Technology, and business stakeholders
• Support third-party AI risk reviews , including vendor due diligence and governance considerations
• Develop and refine AI governance artifacts:
• Intake forms, risk frameworks, review checklists, templates, and process documentation
• Track and report on AI governance metrics:
• Intake volume, review cycle time, risk trends, remediation status, and compliance alignment

• At least 5 years of experience in governance, risk, compliance, privacy, information security, technology risk, third-party risk, audit, or a related discipline.

• Minimum 2 years of direct, hands-on work in AI governance, responsible AI, AI risk assessment, AI compliance, or model risk management.

• Strong understanding of regulatory, privacy, security, and compliance considerations related to AI and data-driven technologies.

• Demonstrated ability to produce clear documentation, policy-aligned assessments, reporting, and audit-ready records.

• Experience partnering with cross-functional stakeholders, including Legal, Procurement, Security, Technology teams, and business leaders.

• Familiarity with vendor risk reviews, control frameworks, oversight practices, and ongoing monitoring processes.

• Excellent communication, analytical, and judgment skills, with the ability to balance risk management needs with practical business adoption.

• Bachelor’s degree or equivalent relevant experience in a related field is preferred. Required Qualifications

• 5+ years of experience in one or more of the following:
• Governance, Risk & Compliance (GRC), Privacy, Information Security, Technology Risk, Third-Party Risk, Model Risk, or Audit
• 2+ years of hands-on experience in:
• AI governance, Responsible AI, AI risk assessment, AI compliance, or model risk management
• Strong understanding of:
• AI/ML risks, data governance, privacy regulations, and emerging AI regulatory frameworks
• Experience conducting risk assessments and documenting controls in a structured environment
• Ability to work cross-functionally and influence stakeholders in a decentralized organization
• Excellent communication, documentation, and organizational skills

Preferred Qualifications

• Familiarity with AI governance frameworks (e.g., NIST AI RMF, OECD, EU AI Act concepts)
• Experience with third-party/vendor risk management related to AI solutions
• Background supporting regulatory or audit reviews
• Experience building or improving governance processes, workflows, or tooling
• Exposure to media, publishing, or large enterprise environments is a plus