AI Governance Analyst

Steampunk•McLean, VA

1d•$95,000 - $125,000

About The Position

Steampunk is seeking an AI Governance Analyst to support responsible AI practices across predictive and generative AI initiatives. The role helps ensure AI systems are safe, ethical, transparent, and compliant with federal guidance and emerging governance standards. The analyst works with engineers, evaluation scientists, product and security teams, and client stakeholders to operationalize AI governance and risk management frameworks throughout the AI lifecycle. The role requires experience in security analysis and governance, risk, and compliance (GRC), along with strong analytical, communication, and stakeholder management skills. The analyst contributes to Steampunk’s AI & Data Exploitation Practice.

Requirements

Ability to obtain and maintain a U.S. government security clearance.
Bachelor’s degree and 5+ years of total experience.
2+ years of experience supporting governance, compliance, risk management, data ethics, cybersecurity, or AI/ML-focused work.
Experience with GRC processes and practices.
Experience conducting or supporting security analysis, risk assessments, control assessments, or related security and risk management activities.
Experience applying the NIST AI Risk Management Framework to support AI governance and risk management activities.
Familiarity with federal AI governance requirements, guidance, and emerging standards.
Understanding of responsible AI concepts, including fairness, transparency, explainability, privacy, bias mitigation, safety, and model risk management.
Exposure to machine learning concepts, LLM behavior, and predictive and generative AI workflows.
Experience working with governance and compliance artifacts such as risk assessments, compliance reports, control documentation, audit logs, or technical documentation.
Strong analytical and problem-solving skills, including the ability to translate governance, risk, security, and policy requirements into actionable guidance.
Excellent written and verbal communication skills, including communicating complex governance and technical concepts to technical and non-technical audiences.
Strong stakeholder management skills and demonstrated ability to collaborate across technical teams, business stakeholders, and client organizations.
Highly organized, detail-oriented, and comfortable managing multiple parallel review processes.

Nice To Haves

Experience working in Agile development environments.
Experience supporting AI/ML governance or responsible AI initiatives in federal or other highly regulated environments.
Relevant certifications in AI governance, privacy, risk management, cybersecurity, or related disciplines.

Responsibilities

Support implementation of AI governance policies, processes, and controls aligned with federal standards and guidance, including the NIST AI Risk Management Framework, OMB guidance, and agency-specific AI directives.
Apply the NIST AI Risk Management Framework to identify, assess, document, and manage AI system risks throughout the AI lifecycle.
Conduct or support security and risk analyses to identify potential vulnerabilities, threats, harms, compliance considerations, and control gaps associated with AI systems.
Support GRC activities, including risk assessments, control reviews, compliance assessments, remediation tracking, and governance reporting.
Create and maintain governance documentation such as model cards, data cards, lineage logs, risk assessments, and responsible AI checklists.
Collaborate with engineering, security, product, and other technical teams to integrate privacy, fairness, transparency, explainability, and safety into design, development, and evaluation workflows.
Partner with AI Evaluation Scientists to define governance-aligned testing criteria, threshold requirements, and reporting patterns for model performance and safety.
Research policy trends, regulatory updates, government mandates, and industry best practices related to responsible AI and AI risk management.
Support AI readiness assessments, approval workflows, and periodic reviews of deployed AI systems.
Facilitate compliance assessments related to data privacy, model usage constraints, security considerations, and safe deployment practices.
Engage with client stakeholders to gather information, communicate governance and risk requirements, answer questions, and support governance decisions and remediation activities.
Document governance processes, guidelines, risks, findings, and recommendations for technical and non-technical audiences.
Contribute to internal templates, playbooks, training materials, and reusable governance tools.