Sr. Analyst, AI Governance

Newell Brands•Atlanta, GA

About The Position

The Information Security Artificial Intelligence (AI) Governance Senior Associate is an intermediate-level professional within the Global Information Security (IS) Risk & Resilience team at Newell Brands. Reporting to the IS Governance Manager, this role is responsible for the day-to-day operational delivery of the IS function's AI governance activities and contributes substantively to the broader IS governance program. The IS Governance Manager retains program accountability; the Senior Associate operates with routine oversight, exercises independent judgment on moderately complex assignments, interprets regulatory requirements, and communicates governance policies and practices to stakeholders within the team and across the business. The role focuses primarily on Information Security AI Governance (50%), Information Security Governance (40%), and Metrics, Analysis and Reporting (10%).

Requirements

Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field.
2-4 years of relevant experience in IS governance, risk management, or compliance.
Effective written and verbal communication skills, with the ability to produce clear governance documentation and reporting for senior audiences.
Self-motivated and proactive, with a genuine commitment to building a long-term career in information security governance.

Nice To Haves

Working knowledge of AI security governance frameworks and regulatory requirements, including the NIST AI RMF, EU AI Act, and OWASP Top 10 for LLMs is preferred.
Solid understanding of primary IS control frameworks, including Center for Internet Security (CIS) Critical Security Controls (CSC) Top 18 and NIST Cybersecurity Framework (CSF) 2.0, with awareness of Payment Card Industry Data Security Standard (PCI-DSS) requirements given the organization's retail operations is preferred.
Familiarity with Cyber Risk Quantification (CRQ) principles and the Factor Analysis of Information Risk (FAIR) methodology is preferred.
Hands-on, day-to-day working experience with major LLMs including ChatGPT, Microsoft Copilot, and Claude; demonstrated capability with agentic AI tooling is a strong plus.
CompTIA Security+, ISC2 Certified in Governance, Risk, and Compliance (CGRC), Certified Information Security Manager (CISM), Advanced in AI Risk (AAIR) is a plus.
Experience with Governance, Risk, and Compliance (GRC) tooling; working knowledge of Optro (formerly AuditBoard) is preferred, and experience with comparable platforms such as ServiceNow GRC, OneTrust, or Archer is equally valued.
Familiarity with data visualization and reporting tools (e.g., Power BI, Tableau) to support governance reporting is preferred.

Responsibilities

Execute the day-to-day operational delivery of the IS function's AI governance activities, including maintaining the IS AI Agent Asset Record, managing the AI tool intake review process from an IS perspective, and maintaining the IS inventory of assessed AI tools.
Conduct IS AI risk assessments, evaluating risk exposure associated with AI tool adoption, identifying control gaps, and recommending treatment actions aligned with the National Institute of Standards and Technology (NIST) AI Risk Management Framework (AI RMF), European Union (EU) AI Act, and Open Worldwide Application Security Project (OWASP) Top 10 for Large Language Models (LLMs).
Develop and maintain IS AI governance policies, standards, and procedures, interpreting regulatory requirements and translating them into practical controls applicable to Newell's AI environment.
Provide operational support to the IS Governance Manager and Director, IS Risk Management, in their capacity as Newell Brands' IS representatives on the AI Governance Committee (AIGC), preparing briefing materials and ensuring both leaders have current risk positions ahead of committee engagements.
Develop and deliver AI security governance awareness content for the business and represent the IS function in cross-functional AI working groups.
Manage assigned IS policy areas through the review, revision, consultation, and publication cycle, communicating policy requirements to stakeholders across the business.
Administer the security exceptions process, evaluating exception requests against established criteria, advising on mitigating controls, and ensuring timely escalation of aged or high-risk items.
Perform control testing and governance assurance activities, assessing control design and operational effectiveness, and documenting findings with actionable recommendations.
Monitor the regulatory environment for IS legislation and standards, including NIS2 and equivalent requirements, summarizing findings and proposing governance responses.
Provide governance input into technology projects and change initiatives and work cross-functionally to embed IS governance practices across the organization.
Develop and maintain governance and IS AI governance Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) aligned to risk appetite and contribute to analytical reports and executive-ready outputs for senior leadership.
Leverage data and visualization tools to present governance insights clearly and identify opportunities for continuous improvement in reporting and governance tooling.