Senior GRC & AI Risk Analyst

Berry Appleman & Leiden; Richardson (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Berry Appleman & Leiden (BAL) is seeking an experienced GRC/Audit professional to help manage security, privacy, and AI governance across the firm. You will lead audits, shape ISMS/PIMS maintenance, and align controls with global standards.

You will collaborate with cross-functional teams, manage third-party risk, and support incident response, DLP operations, BC/DR exercises, and KPI/KRI reporting. BAL offers a dynamic, inclusive environment and opportunities for growth.

Qualifications

• Experience applying risk management methodologies to assess, prioritize, and remediate security, privacy, and compliance risks.
• Knowledge of ISO 27001/27701, NIST CSF, and data protection regulations.
• Familiarity with AI governance frameworks and regulatory requirements.
• Experience conducting internal audits, audit planning, control testing, and remediation tracking.
• Knowledge of third-party risk management (TPRM) and vendor due diligence.
• Experience with DLP tooling and security operations.
• Strong written and verbal communication for leadership and clients.
• Ability to operate autonomously and in a collaborative team.

Responsibilities

• Lead internal audits using risk-based methodology and manage findings.
• Support ISMS and PIMS compliance with ISO standards.
• Support privacy program operations including DPIAs and DSAR.
• Develop and manage BAL's AI governance framework.
• Support TPRM vendor assessments and risk register.
• Operate BAL's data loss prevention (DLP) tools.
• Maintain BAL's BC/DR program and governance metrics.
• Report KPIs and KRIs across GRC domains.
• Coordinate data governance and lifecycle management.

Skills

GRC risk management

ISO27001/27701

NIST CSF

Privacy regulations

AI governance

Audit planning

Vendor due diligence

DLP tooling

KPIs/KRIs

Communication

Education

Bachelor’s degree

Job description

Berry Appleman & Leiden (BAL) is seeking an experienced GRC/Audit professional to help manage security, privacy, and AI governance across the firm. You will lead audits, shape ISMS/PIMS maintenance, and align controls with global standards.

You will collaborate with cross-functional teams, manage third-party risk, and support incident response, DLP operations, BC/DR exercises, and KPI/KRI reporting. BAL offers a dynamic, inclusive environment and opportunities for growth.