Role Overview
AlphaSense is seeking a Senior Risk Analyst to design, implement, and mature a risk management program tailored for an AI-era company. This remote opportunity based in India is ideal for an experienced risk professional who wants to build a quantitative-leaning, live-data-connected risk function rather than merely maintain an existing register.
Key Responsibilities
Design and implement a structured risk management program, incorporating risk taxonomy, scoring methodology, risk appetite statements, and escalation thresholds aligned with frameworks like ISO 27005, NIST RMF, or ISO 31000.
Build and maintain the enterprise risk register as a living operational tool, leading periodic risk identification workshops with business, engineering, and legal stakeholders.
Leverage AI tools to monitor threat intelligence, identify patterns across risk data, accelerate risk narrative drafting, and keep the risk register current.
Support the Third-Party Risk Management (TPRM) function by contributing to vendor risk assessments, risk scoring, and finding documentation in partnership with the TPRM lead.
Identify and assess AI-related risks, including data privacy, model bias, explainability, security misuse, and agentic system behavior while supporting compliance with AI governance frameworks.
Produce clear, executive-ready risk reports, dashboards, and periodic summaries that translate technical findings into business impact language.
Provide cross-functional risk and control guidance on process improvements, new technology adoption, and remediation activities.
Requirements
6+ years of experience in GRC, information security, risk management, or IT audit, preferably within a SaaS or cloud-native environment.
Strong understanding of security and compliance frameworks including SOC 2, ISO 27001, NIST CSF 2.0, and CIS Controls, plus working knowledge of ISO 42001 and NIST AI RMF.
AI-native mindset with practical use of AI tools for analysis, drafting, evidence gathering, and workflow automation while applying human judgment.
Proficiency with GRC platforms for evidence management and control testing such as Drata, Vanta, AuditBoard, or ServiceNow GRC.
Familiarity with cloud environments including AWS, Azure, or GCP and associated security posture tooling like CSPM, SIEM, and identity platforms.
Experience supporting external audits across security or privacy domains, including evidence collection and control walkthroughs.
Ability to interpret technical controls and translate findings into compliance, risk, and policy documentation.
Working knowledge of privacy and data protection requirements like GDPR and CCPA/CPRA.
4+ years of hands-on experience in information security risk management or a combined GRC/risk role building or maturing a risk register and scoring methodology.
Experience maturing a risk program from qualitative to quantitative risk measurement, including introducing scoring models and KRI frameworks.
Nice to Have
Relevant certifications such as CISA, CRISC, CISM, CISSP, CCSK, or ISO 27001 Lead Auditor/Implementer.
Experience with AI governance frameworks like ISO 42001, NIST AI RMF, EU AI Act, or OECD AI Principles.
Exposure to SOX ITGC cycles, managing evidence, walkthroughs, and findings with external auditors.
Privacy program crossover experience including data mapping, DPIAs, and GDPR/CCPA operational compliance.
Scripting or automation experience using Python, JavaScript, or low-code tools applied to GRC or compliance workflows.
Quantitative risk experience such as FAIR-style decomposition, Monte Carlo simulation, or loss exceedance analysis.
Familiarity with risk aggregation and BI tooling like Tableau, Looker, or Power BI.
Background in financial services regulatory risk environments.
Skills and Tools
Python
JavaScript
AWS
Azure
GCP
GRC Platforms (Drata, Vanta, AuditBoard, ServiceNow GRC)
CSPM, SIEM, and Identity Platforms
Risk Registers and Scoring Methodologies
About the Company
AlphaSense provides market intelligence and search built on proven AI, helping sophisticated companies remove uncertainty from decision-making. Trusted by over 6,000 enterprise customers, the company aggregates public and private content sets including equity research, filings, transcripts, expert calls, and news. Founded in 2011 and headquartered in New York City, AlphaSense operates globally with offices across the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. AlphaSense is an equal opportunity employer committed to a respectful and supportive work environment.
How to Apply
To apply for this position, please visit the official AlphaSense careers page on their company website.
