Trust Analyst

Abnormal Security

. Own and run AI Governance, Data Governance, Security Governance, and other governance committees; set agendas, facilitate stakeholders, and drive decisions to closure .

Posted 10/5/2026full-timeRemote • United StatesMid-LevelSenior💰 $114,800 - $165,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AI Governance, Data Governance, and Security Governance, with a strong focus on ISO 27001 implementation and compliance management. Proven ability to lead risk management operations, facilitate cross-functional teams, and drive policy programs while ensuring alignment with regulatory standards.

Highest-signal resume keywords

ISO 27001 ImplementationRisk Management OperationsGRC Program ManagementAudit Automation ToolsStakeholder Engagement

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber SecurityTechnical ComplianceControl MappingContinuous Control MonitoringRisk AssessmentsPolicy DevelopmentRoot Cause AnalysisProject ManagementISO 27701 ComplianceISMS Implementation

Soft Skills

Stakeholder ManagementCommunicationTraining and EducationProblem SolvingFacilitation

Tools & Technologies

ServiceNowAudit Automation ToolsCompliance Management Software

Certifications & Qualifications

ISO 27001 Lead Auditor CertificationCRISCCISSPCPACISAPMPCISM

Industry Keywords

GRCNIST CSFNIST SP 800-53AI GovernanceSaaSRegulated Public CompanyBig 4 Experience

Tech Stack

Tools & technologies

CloudCyber SecurityPMPServiceNow

About the role

Key responsibilities & impact

Own and run AI Governance, Data Governance, Security Governance, and other governance committees; set agendas, facilitate stakeholders, and drive decisions to closure
Own the policy program end to end, including drafting, revising, maintaining policies, driving stakeholder review and acknowledgment, and managing the company’s Policy Center
Own risk management operations, including the risk register, risk assessments, risk exceptions, and enforcement of the 12-month exception cap with renewal review and documentation
Monitor regulatory and industry developments and advise leadership on program strategy and impact
Ensure program activities align with strategy and execute GRC milestones on time and to a high standard
Drive internal control effectiveness through monitoring, control enhancements, and guidance on control design and operations
Perform compliance readiness assessments and provide updates, recommendations, and roadmaps to senior management and business partners
Advise, educate, and train process, control, and risk owners on controls, documentation, and risk management responsibilities
Define and report key risk indicators and key performance indicators
Identify policy and process gaps or conflicts and develop solutions with business partners
Drive remediation and risk mitigation activities, including root cause analysis, action-plan design and tracking, and identifying recurring risk patterns
Design and manage program operations and supporting technology
Engage in ad hoc projects
Communicate control testing, audit, risk assessment, issue management, program health, accomplishments, and risks to project teams, partners, and senior management

Requirements

What you’ll need

4–7 years of experience in cyber security, technology risk, GRC, and/or technical compliance roles
At least 2 years focused on ISO 27001 implementation and maintenance
Experience leading at least one full ISO 27001 certification cycle, including the 2022 revision, from start to finish
Project management experience across concurrent compliance projects, cross-functional teams, Agile or Waterfall methodologies, and tools such as ServiceNow
Experience owning or facilitating cross-functional AI, data, or security governance programs or committees
Strong understanding of security concepts, ISMS implementation and maintenance, control mapping across multiple frameworks, and continuous control monitoring and automation
Experience implementing and managing ISO 27001 and ISO 27701 compliance programs, including Statements of Applicability, risk treatment plans, risk acceptance criteria, internal audit programs, and management reviews
Experience working with external auditors and managing internal stakeholders
Experience with audit automation and continuous control monitoring tools
Ability to manage multiple stakeholders and vendors while maintaining project momentum
Bachelor’s degree or equivalent military experience (nice to have)
ISO 27001, ISO 27701, or ISO 42001 Lead Auditor Certification (nice to have)
CRISC, CISSP, CPA, CISA, PMP, or CISM certification(s) (nice to have)
Experience with NIST CSF, NIST SP 800-53/171, or other control frameworks (nice to have)
Familiarity with AI governance frameworks such as ISO/IEC 42001 and NIST AI RMF (nice to have)
Experience at a technology, SaaS/cloud, or regulated public company (nice to have)
2+ years of Big 4 experience (nice to have)

Benefits

Comp & perks

Bonus or incentive compensation may be available
Equity may be available
Comprehensive benefits package
Pre-employment checks aligned with applicable legislation and Abnormal AI’s security and privacy standards