Remote AI Governance & Risk Analyst

Unió Digital; Tucson, Northern (AZ, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Unió Digital is seeking an AI Governance & Risk Analyst to operate the Managed AI program from Tucson, AZ or remotely. You will own AI policy maintenance, vendor risk monitoring, DPA management, and quarterly evidence packaging for client audits and insurance reviews.

This mid-senior role emphasizes policy discipline and strong written communication. Ideal candidates have 3+ years in IT governance or risk analysis, familiarity with HIPAA, SOC 2, NIST CSF, NIST AI RMF, and ISO 42001, and comfort

Qualifications

• 3+ years in IT governance, security GRC, or comparable risk-analysis role.
• Strong written communication and policy-drafting discipline.
• Familiarity with regulatory frameworks (HIPAA, SOC 2, NIST CSF, NIST AI RMF, ISO 42001).
• Comfortable with technical security data (DNS logs, M365 audit, SIEM extracts).

Responsibilities

• Maintain AI Acceptable Use Policy templates with vertical addenda (construction, mining, healthcare).
• Run DNS-layer shadow AI monitoring and produce the monthly AI Usage Report.
• Manage Data Processing Agreements and BAA inventories with AI vendors.
• Package quarterly evidence for client audit and insurance review.
• Primary point of contact for AI-specific incident response.

Skills

IT governance

GRC risk analysis

Policy drafting

Regulatory frameworks familiarity

Job description

Unió Digital is seeking an AI Governance & Risk Analyst to operate the Managed AI program from Tucson, AZ or remotely. You will own AI policy maintenance, vendor risk monitoring, DPA management, and quarterly evidence packaging for client audits and insurance reviews.

This mid-senior role emphasizes policy discipline and strong written communication. Ideal candidates have 3+ years in IT governance or risk analysis, familiarity with HIPAA, SOC 2, NIST CSF, NIST AI RMF, and ISO 42001, and comfort