Sr. Analyst, AI Governance

About the role

The Information Security Artificial Intelligence (AI) Governance Senior Associate is an intermediate-level professional within the Global Information Security (IS) Risk & Resilience team at Newell Brands. This role is responsible for the day-to-day operational delivery of the IS function's AI governance activities and contributes substantively to the broader IS governance program.

Responsibilities

• Execute the day-to-day operational delivery of the IS function's AI governance activities, including maintaining the IS AI Agent Asset Record, managing the AI tool intake review process from an IS perspective, and maintaining the IS inventory of assessed AI tools.
• Conduct IS AI risk assessments, evaluating risk exposure associated with AI tool adoption, identifying control gaps, and recommending treatment actions aligned with the National Institute of Standards and Technology (NIST) AI Risk Management Framework (AI RMF), European Union (EU) AI Act, and Open Worldwide Application Security Project (OWASP) Top 10 for Large Language Models (LLMs).
• Develop and maintain IS AI governance policies, standards, and procedures, interpreting regulatory requirements and translating them into practical controls applicable to Newell's AI environment.
• Provide operational support to the IS Governance Manager and Director, IS Risk Management, in their capacity as Newell Brands' IS representatives on the AI Governance Committee (AIGC), preparing briefing materials and ensuring both leaders have current risk positions ahead of committee engagements.
• Develop and deliver AI security governance awareness content for the business and represent the IS function in cross-functional AI working groups.

Requirements

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
• 2-4 years of relevant experience in IS governance, risk management, or compliance.
• Working knowledge of AI security governance frameworks and regulatory requirements, including the NIST AI RMF, EU AI Act, and OWASP Top 10 for LLMs is preferred.
• Solid understanding of primary IS control frameworks, including Center for Internet Security (CIS) Critical Security Controls (CSC) Top 18 and NIST Cybersecurity Framework (CSF) 2.0, with awareness of Payment Card Industry Data Security Standard (PCI-DSS) requirements given the organization's retail operations is preferred.
• Familiarity with Cyber Risk Quantification (CRQ) principles and the Factor Analysis of Information Risk (FAIR) methodology is preferred.
• Hands-on, day-to-day working experience with major LLMs including ChatGPT, Microsoft Copilot, and Claude; demonstrated capability with agentic AI tooling is a strong plus.
• CompTIA Security+, ISC2 Certified in Governance, Risk, and Compliance (CGRC), Certified Information Security Manager (CISM), Advanced in AI Risk (AAIR) is a plus.
• Experience with Governance, Risk, and Compliance (GRC) tooling; working knowledge of Optro (formerly AuditBoard) is preferred, and experience with comparable platforms such as ServiceNow GRC, OneTrust, or Archer is equally valued.

Qualifications

• Effective written and verbal communication skills, with the ability to produce clear governance documentation and reporting for senior audiences.
• Self-motivated and proactive, with a genuine commitment to building a long-term career in information security governance.
• Familiarity with data visualization and reporting tools (e.g., Power BI, Tableau) to support governance reporting is preferred.