Trust Analyst
Remote · USD 114,800-165,000 · 2+ years experience · Remote · Posted Oct 5, 2026
At a glance
- Experience
- 2+ years experience
- Workplace
- Remote
- Location
- Remote
- Salary
- USD 114,800-165,000 · Base salary
About the role
- Abnormal AI is looking for a Trust Analyst II to join the Compliance Trust team within Abnormal’s Trust organization.
- This role owns Abnormal's governance and policy program, chairing and running the company's governance committees, including AI Governance, Data Governance, Security Governance, and other governance programs.
- The remainder of the role will be a key stakeholder in risk management operations, including managing the risk register, performing risk assessments, and risk exception administration.
Responsibilities
- Own and run Abnormal's governance committees including AI Governance, Data Governance, Security Governance, and any additional governance programs the business needs.
- Hold end-to-end ownership of the policy program, including drafting, revising, and maintaining policies across governance domains, and driving stakeholder review and acknowledgment.
- Own risk management operations, including the risk register, risk assessments, and administration of risk exceptions.
- Keep abreast of regulatory and industry developments and advise leadership on the potential impact on the program strategy and plans.
- Ensure program activities align with strategy and manage the timely and high-quality execution of GRC landmarks.
- Drive internal control effectiveness through rigorous internal control monitoring, implementing control enhancements, and providing thought leadership on control design, operations, and supporting processes and policies.
- Perform compliance readiness assessments and provide updates, recommendations, and roadmap to senior management both within Security and to our business partners.
- Advise, educate, and train process and control owners with the preparation and ongoing maintenance of controls and control documentation.
- Recommend, develop, and manage the company's risk register, including the definition and reporting on key risk indicators (KRIs) and key performance indicators (KPIs).
- Conduct regular risk assessments and work with relevant departments to identify, evaluate, and mitigate risks across the organization.
Requirements
- 4-7 years of experience in cyber security, technology risk, GRC, and/or technical compliance roles, with at least 2 years focused on ISO 27001 implementation and maintenance
- Demonstrated experience leading at least one full ISO 27001 certification cycle (including the 2022 revision of ISO 27001) from start to finish
- Proven project management experience, including managing multiple concurrent compliance projects with competing deadlines
- Experience owning or facilitating cross-functional governance programs or committees
- Strong understanding of security concepts and practical usage, including Information Security Management System (ISMS) implementation and maintenance
- Experience implementing and managing compliance programs aligned with ISO 27001 and ISO 27701
- Proven track record working with external auditors, including internal stakeholder management
- Experience with audit automation and continuous control monitoring tools
- Proven ability to manage multiple stakeholders and vendors while maintaining project momentum
Preferred qualifications
- Bachelor's degree or equivalent military experience
- ISO 27001, 27701, or 42001 Lead Auditor Certification
- CRISC, CISSP, CPA, CISA, PMP, CISM certification(s)
- Experience with NIST CSF, NIST SP 800-53 / 171 or other control frameworks
- Familiarity with AI governance frameworks (e.g., ISO/IEC 42001, NIST AI RMF)
- Experience preferably at a technology or SaaS / Cloud company and/or with a regulated public company
- 2+ years of Big 4 experience
Benefits
- Base salary range
- Bonus or incentive compensation
- Equity
- Comprehensive benefits package
Skills
- ServiceNow
- ISO 27001
- ISO 27701
- NIST CSF
- NIST SP 800-53
- NIST AI RMF
