Job DescriptionI. Job SumaryThe BISO AI Analyst is responsible for the day-to-day management of the company's enterprise AI governance and oversight framework as part of the Cybersecurity Business Information Security Office (BISO). This role ensures that all artificial intelligence, automation, and low-code/no-code solutions are identified, assessed, and operated in alignment with cybersecurity, privacy, and ethical standards. The analyst will manage and maintain the organization's AI governance platform, which centralizes intake, documentation, and risk evaluation of new and existing AI use cases.
They will also operate monitoring and visibility tools that detect policy violations, data exposure, and unauthorized automations across enterprise systems. In addition, they will leverage cloud security and workload protection platforms to identify and track vulnerabilities within AI-enabled services. This role acts as the connective point between cybersecurity, legal, privacy, data, and business teams to ensure AI innovation proceeds responsibly. The analyst will establish and refine processes for reviewing new AI use cases, documenting risk decisions, and coordinating remediation where necessary. They will also develop reports and dashboards that provide leadership with visibility into the organization's AI inventory, risk posture, and compliance status.
The position requires building skills in both technical acumen and strong governance capability; balancing innovation with risk management and ensuring that enterprise AI initiatives remain transparent, secure, and compliant.
This role is based in office Monday through Thursday with a flexible work from home day on Friday.
II. Essential Duties and Responsibilities- Administer and maintain the OneTrust AI Governance module, including intake workflows, AI inventory, use-case review, and control mapping
- Process and triage new AI use cases and requests, coordinating with Legal, Privacy, and Business stakeholders to ensure alignment with enterprise policy and risk appetite
- Support continuous cataloging of generative AI systems, large language models (LLMs), low-code/no-code automations, and AI agents in the environment
- Continuously evaluate advancements in AI and related threats to support informed governance and security decisions.
- Document risk decisions, mitigation plans, and approvals for AI initiatives
- Operate Zenity (Secure LCNC) to monitor Power Platform, Copilot Studio, and Salesforce automations for policy violations, data exposure, and unapproved agent actions
- Review and analyze findings from Upwind Cloud Security related to AI workloads, containers, or data services in cloud environments
- Deliver insights to leadership regarding AI-driven recommendations, usage patterns, and risk indicators
- Track remediation actions with development and engineering teams and verify closure of AI-related vulnerabilities
- Develop and maintain dashboards summarizing AI risk trends, inventory status, and compliance posture.
- Assist in the creation and maintenance of AI policies, standards, and procedures
- Partner with Privacy, Legal, and Information Security to ensure responsible AI usage aligns with regulatory and ethical expectations
- Provide input into AI-related audit and assessment activities
III. Qualifications A. Required Qualifications
- Bachelor's Degree (accredited) in Computer Science, MIS, or similar area of study or in lieu of degree
- High School Diploma or GED (accredited) and 4 years of related experience
- 2 years in addition to the education requirements
B. Preferred Qualifications
- Someone who comes from a technical netwroking background with a foundation of technical principals and acumen
IV. Physical RequirementsListed below are key points regarding physical demands, physical and occupational risks, and the work environment of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the job.☒ Office: This job primarily operates in a professional office environment and routinely requires the use of standard office equipment such as computers, phones, copy machines, etc.
V. Benefits At WM, each eligible employee receives a competitive total compensation package including Medical, Dental, Vision, Life Insurance and Short Term Disability. As well as a Stock Purchase Plan, Company match on 401K, and more! Our employees also receive Paid Vacation, Holidays, and Personal Days. Please note that benefits may vary by site.
If this sounds like the opportunity that you have been looking for, please click Apply.
