Job Description

Senior Analyst Risk Operations – GRC, AI Governance | 100% Remote (WFH) Opportunity

Summary:

Employers Insurance Group (EIG) is deploying AI tools, models, and agentic applications, and this role supports governing that work in practice, not just on paper. The Senior Analyst supports the day-to-day operation of EIG’s AI governance program as an independent second-line reviewer, working under the NIST AI RMF 1.0 framework and the direction of the AI Governance Committee (AIGC). The role manages the AI system inventory and AI risk log, facilitates and maintains the standards and control specifications that Enterprise Architecture and engineering teams apply at intake, inspects AI and agentic solutions through the AI lifecycle, and prepares the reporting that executives, the AIGC, and the board rely on. IT general controls, SOX, and cyber control work is part of the role, but AI governance is the primary focus. First-line teams remain accountable for risk decisions and control operation; the Senior Analyst facilitates, inspects, and reports. The Senior Analyst works independently, with limited oversight, and is expected to spot gaps and track them to closure.

Essential Duties and Responsibilities:

· AI inventory and risk log. Manage the AI system inventory and AI risk log. Monitor for completeness (EIG’s inventory relies on self-reporting) and facilitate ways to surface AI that has not been reported. Track risks and remediation to closure, and verify that each risk has a named accountable owner and documented risk acceptance where applicable.

· Standards and control specifications. Facilitate development of, and maintain, AI governance standards and control specifications aligned to NIST AI RMF 1.0 (Govern, Map, Measure, Manage). Partner with Enterprise Architecture, engineering, and business teams so each control specification defines the objective, trigger, evidence, pass/fail criteria, and escalation path.

· Governance visibility reviews. Serve as an independent second-line reviewer on Enterprise Architecture intake tickets for AI and agentic solutions. Inspect access control, data privacy and handling, testing and resilience, and third-party risk through the AI lifecycle (intake, risk classification, design review, checkpoint reviews, monitoring expectations, and decommissioning), challenge gaps, and confirm that risk decisions have an accountable owner.

· Control and risk assessments. Assess the design and operating effectiveness of controls across AI models, IT general controls, SOX-relevant controls, and cyber controls. Identify gaps, validate remediation plans, and track findings to closure.

· Committee and executive reporting. Coordinate and prepare AIGC materials, the quarterly NAIC AI grid review, and board- and executive-level reporting on AI governance, including NIST AI RMF maturity progress. Summarize technical findings in clear, non-technical language that tells the real story behind the numbers, and deliver on schedule.

· Regulatory monitoring. Monitor AI and technology regulation (including the NAIC AI Model Bulletin and state adoption, state DOI expectations, and NYDFS 23 NYCRR Part 500). Maintain the inventory of AI-related regulatory obligations and advise on needed changes to standards, controls, and governance documentation.

· Advisory. Advise project, architecture, engineering, and operational teams on responsible AI, privacy, explainability, model behavior, IT general controls, SOX, and cyber hygiene. Build relationships proactively across teams in a remote setting, and bring questions and plans rather than waiting for direction.

· Process improvement. Identify and recommend opportunities to automate and improve governance processes, including control evidence collection, inventories, dashboards, and recurring status tracking.

· Mentoring. Coach junior analysts and review their work for accuracy, control logic, completeness, and documentation quality, supporting their development in methodology, evidence collection, and risk analysis.

Is this role a fit?

This role is a strong fit if you have done governance, risk, or compliance work in a regulated environment, have worked directly on AI or emerging-technology risk, write clear standards and executive summaries, and are comfortable owning deliverables end to end.

This role is not a fit if you are looking for hands-on security operations, penetration testing, or security engineering; model development, data science, or ML engineering work; an external-audit or attestation role; or a role where priorities and next steps are set for you. We work with engineering and data science teams who build and assess models; this role governs how AI is intake-reviewed, controlled, documented, and reported.

Background and Experience/Expertise:

Required

• 4–8 years’ experience in governance, risk, compliance, IT risk, or audit, including direct exposure to AI governance or technology risk work.
• Working knowledge of NIST AI RMF 1.0, and of at least one other control framework or regulation such as ISO 27001, COBIT, SOX ITGC, or NYDFS Part 500.
• Demonstrated ability to write standards, procedures, and control documentation that other teams can follow. A short writing sample may be requested.
• Enough technical understanding of AI systems (LLMs, agentic applications, data flows, testing and monitoring) to ask the right questions of engineers and data scientists and recognize a weak answer. Building models is not required.
• Demonstrated ability to influence stakeholders and manage competing priorities across teams without direct authority.
• Advanced analytical and organizational skills, with the ability to structure problems independently, synthesize information, and deliver actionable insights.
• Clear written and verbal communication, able to translate technical, risk, and AI concepts into concise terms for non-technical and executive audiences.
• Able to manage assigned reviews and governance activities end to end with limited oversight: you define what “done” looks like, check your own work, and flag risks early.
• Curiosity and commitment to learning emerging AI and risk concepts and integrating them into daily work. Comfort working in a remote, conservative corporate environment.

Preferred

• Experience in insurance or another regulated financial services industry, and familiarity with the NAIC AI Model Bulletin.
• Experience as an independent second-line reviewer or in a similar role that requires objectivity from the teams being assessed.
• Professional certification

Education:

• Bachelor’s degree in a relevant field required

Work Environment

• Remote: This role is 100% remote, open to candidates currently located in the United States who are able to work without sponsorship.
• Hours: Schedules are set to accommodate the needs of the role and organization, and may be adjusted as needed.
• Travel: Occasional travel to off-site locations for meetings may be required.

Salary Range: $60,000 - $90,000 with a comprehensive benefits package. Details: EMPLOYERS Benefits

About EMPLOYERS

As a dynamic, fast-growing provider of workers' compensation insurance and services, we are seeking a goal-oriented individual willing to put their ideas to work!

We offer a positive, challenging work environment combined with an opportunity to build your career as you help us grow our business in innovative and imaginative ways that are uniquely EMPLOYERS!

Headquartered in Nevada, EMPLOYERS attributes its long-standing success to its most valuable resource, our employees across the United States. We are known for the quality service and expertise we provide to our clients and the exemplary work environment we provide for our employees.

We live and breathe our core values: Integrity, Customer Focus, Collaboration, Initiative, Accountability, Innovation, and Personal Fulfillment.

At EMPLOYERS, you will discover an energetic environment that inspires top achievement. As "America's small business insurance specialist," we have the resources, reputation, and expanding nationwide identity to enrich your work/life and enhance your career. #LI-Remote About EMPLOYERS