Cybersecurity & AI Governance Analyst

Hace 1 día

Bogota Capital District, RAP (Especial) Central, Colombia Crisil Jornada completa
About CRISIL Limited:
• CRISIL is a leading, agile and innovative global analytics company driven by its mission of making markets function better.
• It has delivered independent opinions, actionable insights, and efficient solutions to over 100,000 customers through businesses that operate from India, the US, the UK, Argentina, Colombia, Poland, China, Hong Kong and Singapore.
• It is majority owned by S&P Global Inc, a leading provider of transparent and independent ratings, benchmarks, analytics and data to the capital and commodity markets worldwide. Job Title: Senior Research Analyst
- Cybersecurity & AI Governance

Experience:
3-7 years Preferred

Qualifications:
bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related field. Key

Skills:
• Cybersecurity Risk Management
• Information Security Risk Assessment
• Risk and Control Frameworks
• AI Governance and Risk Management
• Cybersecurity Controls and Compliance
• Stakeholder Management

Key Responsibilities
• Identify, assess, and prioritize information security risks across business, technology, and operational functions.
• Monitor key risk indicators (KRIs), evaluate control effectiveness, and track emerging cybersecurity threats and vulnerabilities.
• Design, implement, and maintain AI risk management frameworks to govern enterprise AI and Generative AI initiatives.
• Develop and enhance AI security controls, risk statements, assessment methodologies, governance standards, and compliance requirements.
• Conduct risk assessments for AI solutions and ensure alignment with security, regulatory, and ethical standards.
• Support the responsible, secure, and compliant adoption of AI technologies within regulated environments.
• Partner with technology, risk, compliance, and business teams to embed cybersecurity and AI governance best practices across the organization.
• Prepare and present risk insights, control assessments, and remediation recommendations to senior leadership and key stakeholders.
• Stay current on emerging cybersecurity risks, AI regulations, industry frameworks, and evolving threat landscapes to drive continuous improvement.