Compliance Analyst - AI Governance

AlphaSense Oy; Bengaluru; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

AlphaSense Oy is seeking an AI Governance Analyst to drive the risk assessments, maintain the AI inventory, and enable repeatable, auditable processes within the governance program.

You will partner with engineering, product, security, legal/privacy, and procurement to gather information, map use cases to major frameworks, and produce clear documentation in English.

Qualifications

• Experience in risk management, governance, compliance, audit or data privacy.
• Familiarity with AI governance and technology risk.
• Knowledge of EU AI Act, NIST AI RMF, ISO/IEC 42001, and ISO/IEC 27001 is advantageous.
• Comfort with governance tooling, workflows, inventories and reporting.
• Strong written and verbal communication in English.

Responsibilities

• Perform AI risk assessments using templates and criteria, preparing draft assessments for senior review.
• Maintain AI system inventory with records of AI/ML systems, vendors, and use cases.
• Use governance platform to enter data, follow workflows and organize evidence.
• Map use cases to EU AI Act, NIST AI RMF and ISO/IEC 42001 with senior guidance.
• Coordinate with engineering, product, security, legal/privacy, and procurement to collect assessment details.
• Assist with third-party/vendor AI risk reviews by collecting vendor docs and initial reviews.
• Draft clear summaries and notes from assessments and flag high-risk items.
• Track assessment status and follow-ups to keep records up to date.

Skills

Risk management

GRC

Compliance

Audit

Data privacy

AI governance

Regulatory frameworks

Tools

GRC tooling

Job description

About the Role

The AI Governance Analyst is central to building and operating AlphaSense’s AI governance program, helping ensure that the way we deploy, build, and procure AI systems is well-governed, well-documented, and defensible to regulators, auditors, and enterprise clients. Sitting within the Strategic Risk team, this role owns the day-to-day execution of AI risk assessments — intake, classification, evaluation, and documentation — that keep the program running at scale.

As AlphaSense matures its governance infrastructure, including the rollout of a dedicated GRC platform to automate assessment workflows, this role acts as the operational backbone of the program: turning frameworks such as the EU AI Act, NIST AI RMF, and ISO/IEC 42001 into repeatable, auditable processes that grow with the business. This is a risk and governance role — not a hands-on AI engineering role — well-suited to someone who understands how AI systems create risk and knows how to manage it.

What You’ll Do

• Complete AI risk assessments using established templates and criteria — gathering details on AI use cases, working through classification and control questions, and preparing draft assessments for senior review.
• Maintain the accuracy of the AI system inventory by adding and updating records of AI/ML systems, vendors, and use cases.
• Leverage the AI governance platform to enter assessment data, follow set workflows, and organize supporting evidence and documentation.
• Gather the information and evidence needed to map use cases against frameworks such as the EU AI Act, NIST AI RMF, and ISO/IEC 42001, with guidance on interpretation from senior team members.
• Coordinate with engineering, product, security, legal and privacy, and procurement contacts to collect the details needed for assessments, and flag open questions for review.
• Assist with third-party and vendor AI risk reviews by collecting vendor documentation and completing initial reviews for senior validation.
• Draft clear, well-organized summaries and notes from completed assessments, and flag higher-risk or unclear items to senior reviewers.
• Track the status of assessments and follow-ups, keeping records and trackers up to date so nothing slips through.

Who You Are

• IAPP AIGP certified with a strong knowledge of the AI governance landscape and the major frameworks shaping it.
• 2–4 years of experience in risk management, GRC, compliance, audit, or data privacy, with exposure to AI governance, technology risk, or third-party risk.
• Familiar with the EU AI Act, NIST AI RMF, ISO/IEC 42001, and ISO/IEC 27001, and able to apply their requirements to real use cases rather than just cite them.
• Comfortable working with GRC or governance tooling — configuring workflows, managing inventories, and generating reporting — and quick to learn new platforms.
• AI-literate without being a developer: able to understand at a conceptual level how AI and ML systems work, the risks they introduce (bias, hallucination, data leakage, model drift, and similar), and how to translate that into governance language.
• Highly organized and detail-oriented, capable of managing a high volume of assessments, inventory records, and deadlines at once without sacrificing quality.
• A strong written and verbal communicator who can turn technical and regulatory complexity into clear assessments, summaries, and stakeholder‑ready documentation in English.
• A collaborative, self-directed partner who is comfortable with ambiguity and evolving priorities in a function that is being built from the ground up.
• Organized, reliable, and able to manage multiple requests, track deadlines, and stay composed while handling a steady volume of work.
• IAPP AIGP certification, 2–4 years of experience in risk management, GRC, compliance, audit, or data privacy, Exposure to AI governance, technology risk, or third‑party risk, Familiarity with EU AI Act, NIST AI RMF, ISO/IEC 42001, and ISO/IEC 27001, Ability to apply regulatory requirements to real use cases, Experience with GRC or governance tooling, Conceptual understanding of AI/ML systems and associated risks (bias, hallucination, data leakage, model drift), Strong written and verbal communication skills in English, Highly organized and detail-oriented