Staff Risk Expert

Jobtailor; Herndon (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Jobtailor is seeking a policy and governance professional to design and review technology, AI, and information security policies. You will identify governance risks, maintain risk registers, and drive remediation across Legal, Audit, and Security teams.

Responsibilities include translating complex regulatory expectations into practical guidance, leveraging AI and workflow tools, and ensuring accountability throughout policy lifecycle.

Qualifications

• Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 4 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company; OR
• 6 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company
• Knowledge of technology controls, compliance standards, emerging risks, and policy development
• Experience identifying policy risks, performing assessments, maintaining risk registers, tracking remediation, and improving governance processes
• Ability to translate complex requirements into clear, practical, and enforceable guidance
• Strong analytical, communication, stakeholder management, and problem-solving skills
• Experience with AI, automation, workflow, or governance tools
• Ability to work independently, influence decisions, and collaborate across legal, audit, business, security, and technology teams

Responsibilities

• Develop and review technology, AI, and information security policies and standards
• Identify, assess, document, and monitor policy and governance risks
• Develop and maintain risk registers, track remediation, and escalates issues
• Strengthen policy ownership, lifecycle governance, exception workflows, and accountability
• Translate legal, regulatory, audit, security, and business expectations into practical requirements
• Use AI, automation, and workflow tools to improve quality, consistency, efficiency, and adoption
• Partner across Legal, Regulatory, Audit, security, technology, and business teams
• Support stakeholder communication, policy enablement, and continuous improvement of governance services and tools

Skills

Cybersecurity risk management

Policy development

Risk assessment

AI & automation tools

Stakeholder communication

Education

Bachelor's degree in computer science / information security / related field

Tools

AI Tools

Automation Tools

Workflow Tools

Governance Tools

Job description

• Develop and review technology, AI, and information security policies and standards
• Identify, assess, document, and monitor policy and governance risks
• Develop and maintain risk registers, track remediation, and escalates issues
• Strengthen policy ownership, lifecycle governance, exception workflows, and accountability
• Translate legal, regulatory, audit, security, and business expectations into practical requirements
• Use AI, automation, and workflow tools to improve quality, consistency, efficiency, and adoption
• Partner across Legal, Regulatory, Audit, security, technology, and business teams
• Support stakeholder communication, policy enablement, and continuous improvement of governance services and tools

Requirements

• Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 4 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company; OR
• 6 years’ experience in cybersecurity risk or related area at a technology, retail, or data-driven company
• Knowledge of technology controls, compliance standards, emerging risks, and policy development
• Experience identifying policy risks, performing assessments, maintaining risk registers, tracking remediation, and improving governance processes
• Ability to translate complex requirements into clear, practical, and enforceable guidance
• Strong analytical, communication, stakeholder management, and problem-solving skills
• Experience with AI, automation, workflow, or governance tools
• Ability to work independently, influence decisions, and collaborate across legal, audit, business, security, and technology teams

Core Competencies

Demonstrates expertise in developing and reviewing technology, AI, and information security policies while effectively managing cybersecurity risks. Proficient in stakeholder communication and translating complex requirements into practical governance solutions.

Highest-signal resume keywords

• Cybersecurity Risk Management
• Policy Development
• Risk Assessment
• AI and Automation Tools
• Stakeholder Communication

ATS Optimization Keywords

Hard Skills

• Cybersecurity
• Risk Management
• Policy Development
• Compliance Standards
• Technology Controls
• Governance Processes
• Risk Register Maintenance
• Assessment Techniques
• Remediation Tracking
• Emerging Risks

Soft Skills

• Analytical Skills
• Communication Skills
• Stakeholder Management
• Problem-Solving Skills
• Collaboration

Industry Keywords

• Information Security
• Legal Compliance
• Audit Standards
• Technology Governance
• Data-Driven Company

Tools & Technologies

• AI Tools
• Automation Tools
• Workflow Tools
• Governance Tools