Note: The job is a remote job and is open to candidates in USA. EMPLOYERS Insurance Group (EIG) is seeking a Senior Analyst to operate its AI governance program as an independent second-line reviewer. The role manages AI inventories and risk tracking, develops governance controls, reviews AI systems across their lifecycle, assesses controls, monitors regulations, and prepares committee and executive reporting.
Responsibilities
- AI inventory and risk log. Manage the AI system inventory and AI risk log. Monitor for completeness (EIG’s inventory relies on self-reporting) and facilitate ways to surface AI that has not been reported. Track risks and remediation to closure, and verify that each risk has a named accountable owner and documented risk acceptance where applicable
- Standards and control specifications. Facilitate development of, and maintain, AI governance standards and control specifications aligned to NIST AI RMF 1.0 (Govern, Map, Measure, Manage). Partner with Enterprise Architecture, engineering, and business teams so each control specification defines the objective, trigger, evidence, pass/fail criteria, and escalation path
- Governance visibility reviews. Serve as an independent second-line reviewer on Enterprise Architecture intake tickets for AI and agentic solutions. Inspect access control, data privacy and handling, testing and resilience, and third-party risk through the AI lifecycle (intake, risk classification, design review, checkpoint reviews, monitoring expectations, and decommissioning), challenge gaps, and confirm that risk decisions have an accountable owner
- Control and risk assessments. Assess the design and operating effectiveness of controls across AI models, IT general controls, SOX-relevant controls, and cyber controls. Identify gaps, validate remediation plans, and track findings to closure
- Committee and executive reporting. Coordinate and prepare AIGC materials, the quarterly NAIC AI grid review, and board- and executive-level reporting on AI governance, including NIST AI RMF maturity progress. Summarize technical findings in clear, non-technical language that tells the real story behind the numbers, and deliver on schedule
- Regulatory monitoring. Monitor AI and technology regulation (including the NAIC AI Model Bulletin and state adoption, state DOI expectations, and NYDFS 23 NYCRR Part 500). Maintain the inventory of AI-related regulatory obligations and advise on needed changes to standards, controls, and governance documentation
- Advisory. Advise project, architecture, engineering, and operational teams on responsible AI, privacy, explainability, model behavior, IT general controls, SOX, and cyber hygiene. Build relationships proactively across teams in a remote setting, and bring questions and plans rather than waiting for direction
- Process improvement. Identify and recommend opportunities to automate and improve governance processes, including control evidence collection, inventories, dashboards, and recurring status tracking
- Mentoring. Coach junior analysts and review their work for accuracy, control logic, completeness, and documentation quality, supporting their development in methodology, evidence collection, and risk analysis
Skills
- 4–8 years' experience in governance, risk, compliance, IT risk, or audit, including direct exposure to AI governance or technology risk work
- Working knowledge of NIST AI RMF 1.0, and of at least one other control framework or regulation such as ISO 27001, COBIT, SOX ITGC, or NYDFS Part 500
- Demonstrated ability to write standards, procedures, and control documentation that other teams can follow
- Enough technical understanding of AI systems (LLMs, agentic applications, data flows, testing and monitoring) to ask the right questions of engineers and data scientists and recognize a weak answer. Building models is not required
- Demonstrated ability to influence stakeholders and manage competing priorities across teams without direct authority
- Advanced analytical and organizational skills, with the ability to structure problems independently, synthesize information, and deliver actionable insights
- Clear written and verbal communication, able to translate technical, risk, and AI concepts into concise terms for non-technical and executive audiences
- Able to manage assigned reviews and governance activities end to end with limited oversight: you define what “done” looks like, check your own work, and flag risks early
- Curiosity and commitment to learning emerging AI and risk concepts and integrating them into daily work
- Bachelor's degree in a relevant field required
- Open to candidates currently located in the United States who are able to work without sponsorship
- Experience in insurance or another regulated financial services industry, and familiarity with the NAIC AI Model Bulletin
- Experience as an independent second-line reviewer or in a similar role that requires objectivity from the teams being assessed
- Professional certification
- Comfort working in a remote, conservative corporate environment
Benefits
- 100% remote (WFH)
Company Overview