{"id":2312405,"url":"https://alion.io/job/andrew-infosec-lead-engineer-grc-ai","title":"InfoSec Lead Engineer - GRC, AI","company":{"id":3783818,"name":"Andrew Alliance","domain":"andrewalliance.com","url":"https://alion.io/company/andrew-6","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":58000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Jira","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"Outlook","optional":false},{"name":"ServiceNow","optional":false},{"name":"SharePoint","optional":false},{"name":"Smartsheet","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-12T02:13:11Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-30T07:35:26Z","board_verified":true,"closed_at":null,"days_open":18,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":18},"description":"Overview\nLooking for a professional with experience in Information Security, GRC, risk management, compliance, AI governance, and related areas.\nKey Success Factors\nCreates organized, consistent, and audit-ready documentation without requiring heavy rework.\nKeeps AI intake requests moving by identifying gaps, tracking follow-ups, and communicating status clearly.\nBuilds trusted working relationships with technical and non-technical stakeholders.\nLearns quickly, asks thoughtful questions, and applies governance guidance consistently.\nBalances curiosity about AI with a practical focus on security, privacy, compliance, and business risk.\nResponsibilities\nResponsibilities\nLead the AI intake process by managing, reviewing, and approving submitted requests for completeness, documenting business use cases, identifying missing information, and helping route requests to the appropriate stakeholders.\nConduct comprehensive AI-related risk assessments for enterprise tools, third-party platforms, embedded AI features, and internally proposed AI use cases.\nOversee and manage AI governance records, including intake trackers, risk registers, control mappings, exception logs, decision records, and supporting evidence.\nDrive the development, maintenance, and strategic evolution of of AI governance policies, standards, procedures, and user guidance aligned to frameworks such as NIST AI RMF, NIST CSF, ISO 27001, and other applicable requirements.\nLead coordination across IT, Legal, Privacy, Procurement, Compliance, Information Security, and business teams to collect information needed for AI risk reviews and approval decisions.\nIndependently evaluate and assess third-party AI-enabled products from a security, privacy, data handling, compliance, and vendor risk perspective.\nLead control gap analysis, remediation tracking, and documentation of compensating controls for AI-related risks and exceptions.\nLead readiness response activities by collecting evidence, drafting control responses, and maintaining audit-ready documentation.\nMonitor developing AI governance expectations, regulatory themes, and internal control needs, and summarize potential implications for Information Security leadership and stakeholders.\nLead AI security awareness and responsible use communications by helping draft training content, FAQs, knowledge articles, and internal guidance materials.\nDrive broader GRC activities and strategic initiatives, including policy lifecycle support, security questionnaires, third-party risk reviews, compliance reporting, and Information Security Management System support.\nAI Intake and Governance Support\nLead new AI intake submissions and help confirm scope, data classification, user population, integration method, vendor ownership, and intended business outcome.\nDocument intake decisions, review status, required follow-up actions, and evidence in a consistent and traceable manner.\nManage and maintain an AI tool and use case inventory, including ownership, approval status, risk notes, and control considerations.\nDirect intake workflow reporting by preparing status summaries, aging views, action item lists, and stakeholder follow-ups.\nAudit, Customer Response, and Documentation\nLead the preparation and organization of evidence for internal and external audits, customer security questionnaires, and compliance reviews.\nAuthor clear, consistent, strategic, and audit-ready responses that explain Information Security and AI governance controls in business language.\nMaintain version-controlled documentation for policies, standards, procedures, risk decisions, meeting notes, and control evidence.\nEnsure documentation is complete, current, traceable, and aligned to approved processes.\nQualifications\nQualifications Required Minimum\nBachelor’s degree in Cybersecurity, Information Systems, Information Technology, Computer Science, Business, Risk Management, or a related field, or equivalent practical experience.\n5+ years of experience in Information Security, GRC, IT audit, risk management, compliance, privacy, technology operations, or a related internship, co-op\nAdvanced understanding and demonstrated expertise of information security concepts, common control frameworks, and risk management practices.\nProven track record in AI governance, responsible AI, data protection, third-party risk, and emerging technology risk management.\nDemonstrated ability to write compelling technical, organize details, maintain trackers, and translate technical or compliance information into understandable business language.\nExpert-level collaboration and stakeholder management skills, and comfort working with cross-functional stakeholders.\nExceptional attention to detail and strategic thinking with strong follow-through, and ability to manage multiple work items in a structured way.\nWorking knowledge of Microsoft 365 productivity tools such as Word, Excel, PowerPoint, Teams, SharePoint, and Outlook.\nPreferred\nExposure to frameworks or standards such as NIST CSF, NIST AI RMF, ISO 27001, ISO 42001, SOC 2, CMMC, or related governance frameworks.\nExperience with GRC tools, ticketing systems, workflow trackers, Vanta, SharePoint lists, Microsoft Forms, Smartsheet, Jira, ServiceNow, or similar platforms.\nFamiliarity with third-party risk management, security questionnaires, vendor assessments, or data classification concepts.\nAdvanced understanding and demonstrated expertise of cloud services, identity and access management, SaaS applications, APIs, and enterprise integrations.\nOne or more relevant certifications such as CGRC, CISM, CISA, CRISC, or equivalent senior-level certification; or AI governance related training.\nExperience drafting knowledge articles, process documentation, training material, or executive-ready status summaries.\nCompany Description\nWaters Corporation (NYSE:WAT) is a global leader in life sciences and diagnostics, dedicated to accelerating the benefits of pioneering science through analytical technologies, informatics, and service. With a focus on regulated, high-volume testing environments, our innovative portfolio harnesses deep scientific expertise across chemistry, physics, and biology. We collaborate with customers around the world to advance the release of effective, high-quality medicines, ensure the safety of food and water, and drive better patient outcomes by detecting diseases earlier, managing routine infections, and combating antibiotic resistance. Through a shared culture of relentless innovation, our passionate team of ~16,000 colleagues turn scientific challenges into breakthroughs that improve lives worldwide.\nDiversity and inclusion are fundamental to our core values at Waters Corporation. It benefits our employees, our products, our customers and our community. Waters complies with all applicable federal, state, and local laws. Qualified applicants are considered without regard to sex, race, color, ancestry, national origin, citizenship status, religion, age, marital status (including civil unions), military service, veteran status, pregnancy (including childbirth and related medical conditions), genetic information, sexual orientation, gender identity, legally recognized disability, domestic violence victim status, or any other characteristic protected by law. Waters is proud to be an equal opportunity workplace and is an affirmative action employer. All hiring decisions are based solely on qualifications, merit, and business needs at the time.","description_format":"text","description_chars":7476,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Information Security","Laboratory Equipment","Scientific & Lab Software"],"lifecycle":[{"event":"open","at":"2026-10-12T02:13:11Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.686,"p_room":0.35,"age_days":18,"expected_fill_days":8,"reasons":["conf:2","velocity","win:tail","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/andrew-infosec-lead-engineer-grc-ai","json_url":"https://alion.io/job/andrew-infosec-lead-engineer-grc-ai.json","meta":{"generated_at":"2026-10-30T11:32:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16501,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3783818},"rest":"https://alion.io/mcp/rest/get_company?id=3783818"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fandrew-infosec-lead-engineer-grc-ai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fandrew-infosec-lead-engineer-grc-ai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fandrew-infosec-lead-engineer-grc-ai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/andrew-infosec-lead-engineer-grc-ai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fandrew-infosec-lead-engineer-grc-ai"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2312405}},{"tool":"search_jobs","arguments":{"company":"andrewalliance.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2312405},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}