Senior AI Governance & Risk Analyst

Whitley Penn; Plano (TX); Hybrid; USD 115,000 - 165,000; Full time

Benefits offered by this job

Firm Paid Medical Insurance

Voluntary Dental and Vision Insurance

17 Annual Firm holidays

20 days PTO for Salaried Employees

Paid Maternity and Parental Leave

401(k) with Profit Sharing

Discretionary Bonus Program

Health & Wellness Program

Pet Insurance

Job summary

Whitley Penn, one of the nation’s leading audit, tax, and advisory firms, seeks an AI Governance Senior Analyst to administer AI tools and govern frameworks across security, privacy, and compliance. You will work with IT, Legal, Risk, and business units to implement secure, compliant AI deployments aligned with client service standards.

The role emphasizes risk assessment, governance controls, and senior stakeholder reporting, with hybrid office expectations in Plano or Dallas and a standard

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related field.
• Strong understanding and possible certifications in Microsoft 365, Copilot or Copilot Studio.
• Working knowledge of AI/ML concepts including model lifecycle, training data, bias, explainability, and privacy.
• Ability to configure and operationalize governance controls for AI use cases in Azure AI Foundry / Azure AI services, Azure Machine Learning, Microsoft Purview, Microsoft Entra ID, Azure Policy, and Copilot.
• 7+ years in information security, cybersecurity or compliance in a regulated business environment.
• 1+ year working with AI/ML systems, model risk, or emerging technology governance.
• Strong understanding of risk management frameworks (NIST, ISO, SOC 2, etc.).
• Strong understanding of data governance, classification and privacy principles.
• Some experience creating governance dashboards, reporting metrics, and executive updates.
• Detail-oriented with audit and documentation discipline.
• Strong understanding of AI risk management frameworks (NIST AI RMF, OWASP Top 10 for Agentic Applications, ISO 42001) rather than normal risk frameworks.
• Some knowledge of GLBA, SEC and FTC Safeguard Rules and related federal data regulations is a plus.

Responsibilities

• Serve as the administrator for the firm’s AI platforms and tools.
• Identify, assess, manage and help mitigate risk related to the firm’s usage of AI tools and technologies, including legal, regulatory, privacy, security, operational and reputational risks.
• Work with data owners, IT, security, executive leadership and compliance teams to define data and security standards, and to ensure AI technologies are used and deployed in a secure, compliant, and aligned with firm policies.
• Apply knowledge and understanding of AI control environments, governance principles and practices, and risk mitigation techniques to provide proper management of licensing, user access and permissions, settings, configurations, and policies in AI platforms and tools.
• Execute to an AI enterprise wide plan aligned with business goals, client service delivery, operational efficiency, and innovation objectives.
• Develop, implement, and enforce AI governance policies and procedures, prioritizing and managing multiple AI governance and transformation initiatives simultaneously.
• Within the AI domain, develop, create, measure and maintain reporting, analytics, roadmaps, maturity models, and recommendations for leadership.

Skills

Information security

Cybersecurity

Compliance

Data governance

Risk management

Education

Bachelor's degree in Information Systems/Computer Science/Cybersecurity

Tools

Azure AI Foundry

Azure AI services

Microsoft Purview

Microsoft Entra ID

Azure Policy

Copilot

Job description

Whitley Penn, one of the nation’s leading audit, tax, and advisory firms, seeks an AI Governance Senior Analyst to administer AI tools and govern frameworks across security, privacy, and compliance. You will work with IT, Legal, Risk, and business units to implement secure, compliant AI deployments aligned with client service standards.

The role emphasizes risk assessment, governance controls, and senior stakeholder reporting, with hybrid office expectations in Plano or Dallas and a standard