2-4 years of experience in AI risk management, AI governance, technology risk, model risk, IT audit, information security, GRC, or a related discipline, ideally within financial services, a Big Four firm, or a global organization
Experience assessing AI solutions, AI-enabled applications, agents, and emerging technologies, with the ability to evaluate risks, controls, and supporting evidence to develop clear, defensible conclusions
Strong knowledge of AI risk concepts, including prompt injection, hallucinations, sensitive data exposure, bias, explainability, model drift, shadow AI, third-party dependencies, and human oversight requirements
Familiarity with AI governance, risk, and compliance frameworks such as NIST AI RMF, ISO/IEC 42001, EU AI Act, OWASP Top 10 for LLM Applications, and other evolving regulatory standards
Ability to communicate complex technical and risk concepts effectively to both technical and non-technical stakeholders while collaborating across technology, cybersecurity, legal, compliance, privacy, procurement, and business teams
Working understanding of AI technologies, cloud environments, APIs, integrations, access controls, data flows, and automation tools, with proficiency in Microsoft Office and exposure to platforms such as Power BI, Power Automate, ServiceNow, OpenPages, OneTrust, or Microsoft Copilot
Education
Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related discipline
Professional certifications such as ISO/IEC 42001 Lead Auditor/Implementer, ISO/IEC 27001 Lead Auditor/Implementer, CISA, AAIA, AISM, AAIR, CISSP, or CRISC are preferred
Responsibilities
Execute end-to-end control assessments, including planning, walkthroughs, evidence reviews, testing, issue validation, and reporting activities.
Conduct AI risk assessments for AI tools, AI-enabled applications, agents, connectors, plugins, and model-driven solutions to evaluate governance, security, data exposure, autonomy, and oversight controls
Analyze vendor assurance documentation, including SOC reports, ISO certifications, trust-center materials, security documentation, and technical architecture evidence to assess risk and compliance posture
Develop and review Risk and Control Self-Assessments (RCSAs), documenting risk statements, control mappings, effectiveness evaluations, evidence-based conclusions, and residual risk assessments
Support ISO/IEC 27001:2022 readiness reviews, internal audits, and continuous control monitoring activities by evaluating policies, procedures, technical configurations, and operational evidence
Prepare clear and actionable assessment reports, identifying findings, risks, observations, and improvement opportunities supported by appropriate evidence and recommendations
Partner with control owners, product teams, technology teams, and risk stakeholders to facilitate assessments, communicate outcomes, and drive remediation efforts and maintain accurate assessment documentation, workpapers, issue logs, evidence repositories, and governance reporting within approved GRC and collaboration platforms Leverage data analytics, automation, and approved AI tools to enhance assessment efficiency, reporting quality, consistency, and operational effectiveness and stay informed on emerging developments in AI, cybersecurity, regulatory requirements, and risk management practices, translating insights into practical control assessment approaches
About the Team Our Internal Controls team plays a critical role in strengthening Moody’s control environment by evaluating and enhancing the effectiveness of controls that mitigate financial, cybersecurity, operational, and emerging technology risks. We partner with stakeholders across the organization to drive compliance, resilience, and continuous improvement through a disciplined and risk-focused approach. As part of this team, you will have the opportunity to work on innovative AI governance and risk initiatives, collaborate with global teams, and contribute to the development of a robust control framework that supports Moody’s strategic objectives. This role offers strong exposure to emerging technologies, ongoing professional development, and the opportunity to make a meaningful impact in a rapidly evolving risk landscape.
Work with Us. Change the World. At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive.
... people grow. For more information, visit WPP.com. Why we're hiring: The Technology Risk & Controls Analyst operates as part of the second line Technology Risk & Controls function, working under the direction of the Technology Risk & Controls Lead. This role supports the delivery of the controls assurance programme across Business ...
... and not a privilege. About the team Internal Controls Division leads the controls transformation exercise for Reckitt across different countries. Internal Controls framework has been developed to mitigate key financial reporting risks. About the role Your responsibilities (a) Execution of Controls Assurance and Transformation ...
... methodology development. - Develop strong working relationships with client (process owner/functional heads). - Attention to detail and mentor young interns and analysts within the practice. - Contribute to knowledge management sessions within the practice. Sk ills a nd a ttr i bute s for s uc c ess - Determine that the work ...
... with motivating and fulfilling experiences throughout your career to help you on the path to becoming your best professional self. The opportunity : Senior Analyst-FS-Business Consulting Risk-CNS - Risk - Process & Controls - Mumbai FS : Finance fuels our lives. Banking, Insurance and Wealth management, create the foundations ...
... fast-paced hospitality environment. - You enjoy collaborating with operational teams to improve performance and profitability. - Previous experience as an F&B Controls Executive, Cost Controller, F&B Cost Analyst or Finance Executive within a hotel or hospitality environment. - Strong knowledge of food and beverage cost control, ...
... globe. The successful candidate will play a key role in supporting the development and configuration of the CostManagement System (EcoSys) within the Project Controls function and contribute to enterprise-wide initiativesrelated to Project Controls systems. This position will primarily focus on system configuration and enhancement ...
... steps. Our partner is looking for an Analyst, SOX Compliance based in India. Join a collaborative, global environment where you will help strengthen internal controls and support the integrity of financial reporting. As an Analyst, SOX Compliance, you will contribute to the global Sarbanes-Oxley (SOX) compliance program by ...
JOB DESCRIPTION This role ensures cybersecurity efforts are not only executed effectively, but also measurable, traceable, and defensible. The Cyber Security Analyst will help structure and maintain the processes, data, and documentation required to support security operations, risk and remediation tracking, control validation, ...