SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 114,800 - 165,000 / annual
Abnormal AI is seeking a Trust Analyst II to join the Compliance Trust team within the Trust organization. This role owns the company's governance and policy program, including chairing and running governance committees (AI Governance, Data Governance, Security Governance, and others). You will hold end-to-end ownership of policy management—from drafting through stakeholder acknowledgment and management of the company's Policy Center. Governance and policy ownership comprise the majority of this role's scope.
Additionally, you will serve as a key stakeholder in risk management operations, including managing the risk register, performing risk assessments, and administering risk exceptions. You will also provide general compliance support such as audit readiness, control evaluation, and issue remediation.
Key responsibilities include:
- Own and run Abnormal's governance committees, setting agendas, facilitating cross-functional stakeholders, and driving decisions to closure
- Hold end-to-end ownership of the policy program, including drafting, revising, and maintaining policies across governance domains
- Manage the company's Policy Center and drive stakeholder review and acknowledgment
- Own risk management operations, including the risk register, risk assessments, and administration of risk exceptions
- Keep abreast of regulatory and industry developments and advise leadership on potential impact
- Ensure program activities align with strategy and manage timely, high-quality execution of GRC landmarks
- Drive internal control effectiveness through rigorous monitoring and control enhancements
- Perform compliance readiness assessments and provide updates and recommendations to senior management
- Advise and train process and control owners on control preparation and maintenance
- Recommend, develop, and manage the company's risk register, including KRIs and KPIs
- Conduct regular risk assessments and work with departments to identify, evaluate, and mitigate risks
- Proactively identify gaps or conflicts in existing policies and processes
- Drive remediation and risk mitigation activities, including root cause analysis
- Design and manage program operations to support program goals
- Maintain regular, clear communication with project teams and management
The ideal candidate has an auditor's mindset with keen attention to detail, exceptional project management skills, strong communication abilities (especially explaining complex technology to diverse audiences), excellent collaboration and business sense, and awareness of customer requirements for a leading cybersecurity SaaS provider.
REQUIREMENTS:
Must Haves:
- 4-7 years of experience in cyber security, technology risk, GRC, and/or technical compliance roles, with at least 2 years focused on ISO 27001 implementation and maintenance
- Demonstrated experience leading at least one full ISO 27001 certification cycle (including the 2022 revision) from start to finish
- Proven project management experience, including managing multiple concurrent compliance projects with competing deadlines; leading cross-functional teams across technical and business units; experience with project management methodologies (Agile, Waterfall) and tools (ServiceNow, etc.); and a track record of delivering complex compliance projects on time and within scope
- Experience owning or facilitating cross-functional governance programs or committees (e.g., AI governance, data governance, security governance), including running working groups and driving decisions with senior stakeholders
- Strong understanding of security concepts and practical usage, including Information Security Management System (ISMS) implementation and maintenance, control mapping across multiple frameworks, and continuous control monitoring and automation
- Experience implementing and managing compliance programs aligned with ISO 27001 and ISO 27701, including development and maintenance of Statement of Applicability, risk treatment plans and risk acceptance criteria, internal audit programs, and management review processes
- Proven track record working with external auditors, including internal stakeholder management
- Experience with audit automation and continuous control monitoring tools
- Proven ability to manage multiple stakeholders and vendors while maintaining project momentum
Nice to Have:
- Bachelor's degree or equivalent military experience
- ISO 27001, 27701, or 42001 Lead Auditor Certification
- CRISC, CISSP, CPA, CISA, PMP, CISM certification(s)
- Experience with NIST CSF, NIST SP 800-53 / 171 or other control frameworks
- Familiarity with AI governance frameworks (e.g., ISO/IEC 42001, NIST AI RMF)
- Experience preferably at a technology or SaaS / Cloud company and/or with a regulated public company
- 2+ years of Big 4 experience
