Senior AI Governance Analyst

Enter Job Description...

The AI Governance Sr Analyst serves as the operational backbone of Client s AI governance program, reporting into the Privacy team under the direction of senior privacy counsel. This role is responsible for the day-to-day execution of AI governance processes, including AI asset inventory management, risk assessments, policy compliance tracking, regulatory monitoring, and stakeholder reporting. The Sr Analyst works closely with the AI Working Group (AIWG) Governance & Risk Sub-Committee and cross-functional partners across IT, Information Security, Legal, Intellectual Property, Privacy, Quality, and R&D to ensure that AI technologies are adopted responsibly and in compliance with applicable laws, internal policies, and responsible AI principles. This is a remote, individual contributor role that requires strong process discipline, cross-functional coordination skills, and the ability to operate effectively within an evolving governance framework. The Sr Analyst is expected to be a self-directed executor who can also contribute proactive recommendations for improving governance practices.

Duties:

• Maintain and continuously improve the centralized AI asset inventory, ensuring completeness, accuracy, and timely updates across all business units and corporate functions
• Manage the intake process for new AI use cases, including vendor and internally developed solutions, routing submissions through appropriate governance review bodies
• Track AI assets through their lifecycle, from intake and approval through deployment, monitoring, and retirement, and coordinate periodic reconciliation of AI inventory data across systems and stakeholders
• Administer AI risk assessments, applying defined risk classification criteria and escalation procedures, and track risk assessment outcomes, remediation actions, and risk acceptance decisions
• Support the operationalization of AI-related regulatory requirements, including the EU AI Act, Colorado AI Act, and other emerging AI regulations, translating compliance obligations into actionable process steps
• Support the development, maintenance, and distribution of AI governance policies, standards, and guidance documents in coordination with functional owners across Privacy, Legal, IP, InfoSec, and Quality
• Maintain standardized templates, documentation practices, and process workflows for AI governance activities
• Design and maintain governance dashboards and reports that provide visibility into AI inventory status, risk posture, compliance metrics, and governance activity
• Prepare materials and status updates for the AIWG, Governance and Risk Sub-Committee, and AI SteerCo as needed, and track management action plan progress related to AI governance audit findings
• Serve as the primary operational point of contact for AI governance inquiries, working across IT, Information Security, Legal, Intellectual Property, Privacy, Quality, and R&D
• Support the Governance and Risk Sub-Committee with meeting preparation, action item tracking, and follow-through on recommendations
• Coordinate with Quality and Regulatory Affairs teams to ensure AI governance processes complement, rather than duplicate, existing product-related workflows for SaMD and other regulated AI applications.

Skills:

• Working knowledge of responsible AI principles and the risks associated with AI adoption, including bias, transparency, data privacy, security, and intellectual property considerations
• Familiarity with AI-related regulatory frameworks such as the EU AI Act, FDA guidance on AI/ML, Colorado AI Act, or similar emerging legislation
• Strong organizational and project coordination skills including detail orientation, an ownership mindset, and the ability to manage multiple workstreams across functions simultaneously
• Excellent written and verbal communication skills, including effective collaboration with many cross-functional team members and the ability to produce clear reports, dashboards, and governance documentation for diverse audiences
• Demonstrated experience administering governance or compliance processes, including intake workflows, risk assessments, inventory management, or audit support
• Comfort operating in ambiguity with the ability to work within an evolving governance framework and help shape processes as they mature.

Education:

• Bachelor s degree, preferably in legal studies, information systems, public policy, health sciences, or a related discipline, and 2+ years of related experience, or High School Diploma (or equivalent) and 5+ years of related experience required
• Preference for candidates with 5+years of professional experience working in privacy, compliance, risk management, quality systems, or governance within a highly regulated industry (medical devices, pharmaceuticals, healthcare, or financial services)
• Must be US-based. Eastern time-zone preferred
• Experience with GRC platforms such as OneTrust, AuditBoard, ServiceNow, or similar, preferred
• Medical device or life sciences industry experience, preferred
• IAPP certification (AIGP, CIPP, CIPM, or CIPT) or similar professional credential, preferred

EEO Employer
LanceSoft is a certified Minority Business Enterprise (MBE) and an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. LanceSoft makes hiring decisions based solely on qualifications, merit, and business needs at the time.