GRC & AI Security Analyst: Risk, Compliance & Automation

AMISEQ; San Jose (CA); On-site; USD 95,000 - 120,000; Full time

Job summary

AMISEQ is seeking an Information Security Governance, Risk, and Compliance (GRC) Analyst to enhance their risk management program and compliance with standards such as ISO27001 and GDPR. The role focuses on contributing to the development and execution of risk management strategies while leveraging AI and intelligent automation.

The ideal candidate will have at least 5 years of relevant experience, with a solid understanding of governance frameworks and practical knowledge of AI applications in GRC processes.

Qualifications

• 5 years in governance, risk and compliance or information security.
• Knowledge of CISSP security domains and best practices.
• Understanding of security regulatory requirements (SOX, GDPR).
• Experience with security governance models (ISO 27001, NIST).
• Ability to communicate complex risk concepts to stakeholders.
• Hands-on experience in building AI/automation solutions.

Responsibilities

• Support the GRC operating model and customer engagement.
• Perform risk assessments addressing security threats.
• Design and deploy AI-powered GRC processes.
• Extract insights from GRC datasets for risk scoring.
• Ensure compliance with ISO 42001 and EU AI Act.

Skills

Governance, risk, and compliance

Information security risk management

AI-powered solutions development

Risk assessment

Knowledge of ISO standards

Tools

APIs

Python scripting

Low-code platforms

Job description

AMISEQ is seeking an Information Security Governance, Risk, and Compliance (GRC) Analyst to enhance their risk management program and compliance with standards such as ISO27001 and GDPR. The role focuses on contributing to the development and execution of risk management strategies while leveraging AI and intelligent automation.

The ideal candidate will have at least 5 years of relevant experience, with a solid understanding of governance frameworks and practical knowledge of AI applications in GRC processes.