Governance & Policy Lead – Compliance & Risk

OpenKrill; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Abnormal AI is seeking a Trust Analyst II to join the Compliance Trust team. The role owns governance and policy management, chairs governance committees, and leads risk management operations and audit readiness efforts.

The candidate should bring a sharp auditing mindset, strong project management, and the ability to explain complex technology to diverse audiences. You will work with cross-functional teams and external auditors, ensuring policies and controls are aligned with regulatory

Qualifications

• 4–7 years in cyber security, technology risk, GRC, and/or technical compliance roles
• At least 2 years focused on ISO 27001 implementation/maintenance
• Experience leading ISO 27001 certification cycles is a plus

Responsibilities

• Own governance committees (AI/Data/Security) including agenda, stakeholders, and decisions.
• End-to-end policy program ownership: drafting, revising, and maintaining policies across governance domains.
• Manage risk register, risk assessments, and administration of risk exceptions.
• Advise leadership on regulatory developments and potential program impact.
• Drive control monitoring, enhancements, and governance improvements.
• Communicate program status and risks to senior management and partners.

Skills

Auditing mindset

Analytical thinking

Governance leadership

Policy management

Risk management

Project management

Effective communication

Stakeholder comms

Education

ISO 27001 knowledge

Tools

ServiceNow

ISO 27001

Job description

Abnormal AI is seeking a Trust Analyst II to join the Compliance Trust team. The role owns governance and policy management, chairs governance committees, and leads risk management operations and audit readiness efforts.

The candidate should bring a sharp auditing mindset, strong project management, and the ability to explain complex technology to diverse audiences. You will work with cross-functional teams and external auditors, ensuring policies and controls are aligned with regulatory