Senior AI-Driven Risk Architect (GRC/Security)

Remote; San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

AlphaSense seeks a Senior Risk Analyst to design and mature a risk framework spanning information security, AI, and operational risk. You will establish risk scoring, own the enterprise risk register, and deliver risk intelligence that informs decisions at service owner to executive levels.

You will lead AI-assisted risk workflows, monitor threat landscapes, support TPRM, and ensure risk outputs are validated before informing decisions.

Qualifications

• 6+ years in GRC, information security risk management, or IT audits in SaaS/cloud environments.
• Experience translating risk findings into business language for leadership.
• Proven track record maturing risk programs from qualitative to quantitative.
• Experience supporting TPRM assessments and vendor risk documentation.
• Comfort using AI tools for risk analysis, narratives, and automation.
• Knowledge of GDPR/CCPA privacy considerations in security controls.

Responsibilities

• Design and implement a greenfield risk management program and taxonomy.
• Own the enterprise risk register with owners, ratings, and remediation timelines.
• Develop AI-augmented risk analysis to surface insights and automate workflows.
• Support Third-Party & Vendor risk assessments with a consistent scoring approach.
• Identify and assess AI-related risks: privacy, bias, explainability, and governance.
• Produce executive risk reports, dashboards, and KRIs with live data sources.
• Collaborate cross-functionally with Engineering, Legal, and Product to embed risk management.

Skills

GRC knowledge

SOC 2 understanding

ISO 27001 familiarity

NIST CSF 2.0

TPRM

AI governance

Cloud security

Data privacy

Audits & controls

Risk reporting

Education

Bachelor's in CS/IS or related

Tools

Drata/Vanta/AuditBoard

ServiceNow GRC

Tableau/Power BI

Cloud platforms (AWS/Azure/GCP)

Job description

AlphaSense seeks a Senior Risk Analyst to design and mature a risk framework spanning information security, AI, and operational risk. You will establish risk scoring, own the enterprise risk register, and deliver risk intelligence that informs decisions at service owner to executive levels.

You will lead AI-assisted risk workflows, monitor threat landscapes, support TPRM, and ensure risk outputs are validated before informing decisions.