Cyber Security & AI Risk Analyst

Job Description

Conduct risk assessments for AI tools, GPTs, and automation use cases using NIST AI RMF-aligned evaluation frameworks.

Review AI tool submissions for security, privacy, and compliance risks; escalate issues as needed.

Support the development and maintenance of Worthington's AI Registry and related workflows.

Assist with OneTrust implementation, including configuring intake workflows, registry fields, risk scoring logic, and documentation capture.

Monitor open reviews and ensure timely follow-up with stakeholders (business leads, vendors, legal, cybersecurity, etc.).

Collaborate on creating and maintaining cybersecurity content within AI governance documentation, registry systems, playbooks, risk scoring models, and OneTrust survey templates.

Represent Cyber in AI governance meetings (e.g., Governance Group, Triage Team) as a contributing member (non-approving role).

Support importing and mapping third-party vendors in OneTrust and help manage third-party risk review processes.

Assist in building and maintaining the Third-Party Risk Management (TPRM) governance program, including policies, workflows, and response tracking.

Draft and maintain Cyber-owned components of AI risk assessments, playbooks, and frameworks in partnership with Cyber and Governance leads.

Pay Range: 55-70/hr

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

Skills and Requirements

• 3-10 years of experience in cybersecurity, risk management, compliance, or privacy.

• Familiarity with AI-related risk domains

• Knowledge of NIST frameworks

• Experience with OneTrust