Cybersecurity & AI Governance Analyst

Crisil; Bogotá; On-site; COP 48,000,000 - 78,000,000; Full time

Job summary

CRISIL is seeking a Senior Research Analyst in Bogotá to lead cybersecurity and AI governance efforts. The role requires 3–7 years of experience across information security and risk management. You will identify risks, design AI risk frameworks, and promote robust security controls in a regulated environment.

You will collaborate with technology, risk, compliance and business teams to embed best practices, monitor KRIs, and present remediation strategies to senior leadership.

Qualifications

• Bachelor’s or Master’s degree in computer science, Information Security, Cybersecurity, or a related field.

Responsibilities

• Identify, assess, and prioritize information security risks across business, technology, and operational functions.
• Monitor key risk indicators (KRIs), evaluate control effectiveness, and track emerging cybersecurity threats and vulnerabilities.
• Design, implement, and maintain AI risk management frameworks to govern enterprise AI and Generative AI initiatives.
• Develop and enhance AI security controls, risk statements, assessment methodologies, governance standards, and compliance requirements.
• Conduct risk assessments for AI solutions and ensure alignment with security, regulatory, and ethical standards.
• Support the responsible, secure, and compliant adoption of AI technologies within regulated environments.
• Partner with technology, risk, compliance, and business teams to embed cybersecurity and AI governance best practices across the organization.
• Prepare and present risk insights, control assessments, and remediation recommendations to senior leadership and key stakeholders.
• Stay current on emerging cybersecurity risks, AI regulations, industry frameworks, and evolving threat landscapes to drive continuous improvement.

Skills

Cybersecurity Risk Management

Information Security Risk Assessment

Risk and Control Frameworks

AI Governance and Risk Management

Cybersecurity Controls and Compliance

Stakeholder Management

Education

Bachelor’s or Master’s in Computer Science / Information Security / Cybersecurity

Job description

• CRISIL is a leading, agile and innovative global analytics company driven by its mission of making markets function better.
• It has delivered independent opinions, actionable insights, and efficient solutions to over 100,000 customers through businesses that operate from India, the US, the UK, Argentina, Colombia, Poland, China, Hong Kong and Singapore.
• It is majority owned by S&P Global Inc, a leading provider of transparent and independent ratings, benchmarks, analytics and data to the capital and commodity markets worldwide.

Job Title: Senior Research Analyst - Cybersecurity & AI Governance

Experience: 3-7 years

Preferred Qualifications:

bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related field.

Key Skills:

• Cybersecurity Risk Management
• Information Security Risk Assessment
• Risk and Control Frameworks
• AI Governance and Risk Management
• Cybersecurity Controls and Compliance
• Stakeholder Management

Key Responsibilities

• Identify, assess, and prioritize information security risks across business, technology, and operational functions.
• Monitor key risk indicators (KRIs), evaluate control effectiveness, and track emerging cybersecurity threats and vulnerabilities.
• Design, implement, and maintain AI risk management frameworks to govern enterprise AI and Generative AI initiatives.
• Develop and enhance AI security controls, risk statements, assessment methodologies, governance standards, and compliance requirements.
• Conduct risk assessments for AI solutions and ensure alignment with security, regulatory, and ethical standards.
• Support the responsible, secure, and compliant adoption of AI technologies within regulated environments.
• Partner with technology, risk, compliance, and business teams to embed cybersecurity and AI governance best practices across the organization.
• Prepare and present risk insights, control assessments, and remediation recommendations to senior leadership and key stakeholders.
• Stay current on emerging cybersecurity risks, AI regulations, industry frameworks, and evolving threat landscapes to drive continuous improvement.