Cyber Risk Analyst – AI

Job Location:  hybrid in Bucharest Recruitment process: HR screening Technical Interview Cultural discusion Role description: The Cyber Risk Analyst is also a subject matter expert leveraging a deep understanding of the enterprise risk discipline and regulatory compliance combining deep knowledge of theory and organizational practice or expertise across several different disciplines within a function. Job Responsibilities:  Build and apply knowledge of cybersecurity and IT controls, systems and process landscape to enable clear understanding of impact and lead Initiative affecting wider organizations.  Perform comprehensive risk assessments for AI/ML and GenAI projects to identify potential security vulnerabilities and threats.  Work closely with data scientists and AI/ML engineers to understand the data flows, algorithms, and models, ensuring security measures are integrated throughout the development lifecycle.  Assess the security of third-party AI/ML tools and platforms, ensuring they meet organizational security standards and compliance requirements.  Maintain detailed documentation of risk assessments, security measures, and incident reports, and provide regular updates to senior management and relevant stakeholders.  Keep abreast of the latest cybersecurity threats, trends, and technologies related to AI/ML and GenAI, and proactively update security strategies accordingly.  Support stakeholders with cybersecurity or regulatory compliance related risk expertise and knowledge. Responsible for identifying technology risks and proposing control design.  Provide advice on control & indicators design that is both sustainable and right sized (i.e. a simple solution for a simple problem, no overengineering).  Support with operational activities related to cybersecurity risk management. Includes supporting cyber risk assessments, security policy exceptions, and assessing issues from a cyber risk perspective. Liaise with other risk and audit teams (Risk and Controls, Internal Audit, external auditors, Business continuity teams, IT Disaster recovery and Service continuity team etc.) as needed and provide support with audits.  Reporting on control execution, coverage, KPI and issues through booking reporting and dashboarding tools (Jira, Tableau, ServiceNow).  Stay flexible to meet the dynamic business needs, while maintaining robust solutions that strengthen the control environment.  Be flexible and agile in response to the change in business, change in stakeholder expectations and/or change in regulatory/operating environment of B.com.  Be able to split large tasks into logical, manageable and decoupled actions which are managed effectively and delivered on time. Experience: Preferred: 5+ years of experience gained within IT risk, compliance, internal controls or audit within a highly regulated industry.  Minimum: 3 years of experience gained within IT risk, compliance, internal controls or audit within a…