IT Business Analyst – Third-Party AI Risk Management

IT Business Analyst – Third-Party AI Risk Management Contract | Remote | United States — About the Company A leading third-party AI risk management company at the forefront of how enterprises identify, assess, and respond to AI-related risks introduced through their vendor ecosystems. This organization partners with cross-functional teams across technology, legal, privacy, and governance to build scalable, intelligence-driven risk programs. Their work directly shapes how modern businesses make decisions about the third parties they trust. — The Role This is an opportunity to play a meaningful role in building out an emerging and high-priority capability: managing the AI-related risks that come with today's complex vendor landscapes. As an IT Business Analyst on a contract basis, you will bridge the gap between business stakeholders and technology teams — translating complex risk concepts into clear requirements, structured workflows, and actionable documentation. If you thrive in ambiguous, fast-moving environments and enjoy bringing order to complexity, this role is built for you. — What You Will Do • Lead working sessions with stakeholders across technology, legal, privacy, and business units to surface and document AI risk management requirements • Define end-to-end workflows for evaluating, tracking, and responding to AI-related risks tied to vendor relationships • Conduct current-state and future-state process analysis to identify gaps and opportunities for improvement • Develop business rules and decision frameworks covering risk treatment, escalation paths, reassessment triggers, and ongoing monitoring • Produce process maps, user stories, gap analyses, and formal business requirements documentation • Identify and document data requirements needed to connect AI risk findings to vendor context — including ownership, data exposure, connectivity, and contractual obligations • Collaborate with technology teams to define integration requirements and support workflow implementation • Contribute to pilot initiatives involving AI-enabled vendors and emerging risk intelligence capabilities • Help establish governance models that clarify ownership and accountability for AI-related risk findings across the organization — What We Are Looking For • 3–5 years in business analysis, risk, compliance, governance, or cybersecurity • Proven experience gathering and documenting business requirements • Skilled in facilitating stakeholder workshops and cross-functional working sessions • Demonstrated ability to create process documentation, workflows, and gap analyses • Experience writing user stories and defining business rules or decision criteria • Strong analytical thinking and structured problem-solving approach • Clear and confident written and verbal communication skills • Proficiency with Microsoft Office Suite • Bachelor's degree in a relevant field The ideal candidate brings a solid foundation in business analysis and has worked in environments where translating ambiguous business needs into structured, actionable documentation is the norm. This role demands someone who can hold their own in conversations with legal, technology, and risk stakeholders alike — synthesizing diverse perspectives into coherent requirements. Experience in risk, compliance, or governance contexts is especially valuable, as the work sits at the intersection of process design and risk decision-making. — Nice to Have • Experience supporting TPRM or third-party cyber risk programs • Familiarity with platforms such as OneTrust, ServiceNow, or Archer • Background in AI governance, technology risk, or operational risk concepts • Experience building decision trees, business rules, or process flows in a risk context • Exposure to vendor management, risk remediation workflows, or governance program design Candidates who bring familiarity with third-party risk management programs or GRC platforms will be able to contribute more quickly and with greater depth. An understanding of AI governance concepts — even at a foundational level — is a genuine differentiator, as this role sits at the cutting edge of how organizations are beginning to formalize AI risk as a discipline. Prior experience navigating vendor management or risk remediation workflows will help you hit the ground running. — What We Offer This is a fully remote contract engagement open to candidates based in the United States. You will have the opportunity to work on a capability that is genuinely new territory for most organizations — gaining hands-on experience in third-party AI risk management at a time when demand for this expertise is accelerating rapidly. The cross-functional nature of the work means consistent exposure to senior stakeholders across risk, technology, legal, and governance functions, offering strong professional development for analysts looking to deepen their expertise at the intersection of AI and enterprise risk.

Ready to join us?