AI Governance, Risk & Security Analyst

Job Posting Title

AI Governance, Risk & Security Analyst

Agency

090 OFFICE OF MANAGEMENT AND ENTERPRISE SERV

Supervisory Organization

CIO

Job Posting End Date

Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.

Estimated Appointment End Date (Continuous if Blank)

Full/Part-Time

Full time

Job Type

Regular

Compensation

Job Description

As an AI Governance, Risk & Security Analyst with OMES you will enjoy:

• Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.

• A comprehensive Benefit Package with a generous benefit allowance to offset the cost of insurance premiums for employees and their eligible dependents.

Job Details

• Full-time 40-hour work weeks.

• Support the Information Services Division.

• Salary is based on education and experience.

• This is an on-site position located in Oklahoma City, OK.

Position Summary

The AI Governance, Risk & Security Analyst supports the secure, ethical, and compliant use of artificial intelligence technologies within the agency for the State of Oklahoma. This role ensures adherence to state statutes, statewide IT policies, and agency-specific security requirements. The Analyst conducts AI risk assessments, evaluates AI systems for compliance and security gaps, contributes to governance processes, and helps maintain transparency and accountability in support of public trust.

This position is essential to ensuring that AI systems sanctioned for use by the State meet standards for privacy, security, equity, reliability, and ethical public service.

Key Responsibilities

AI Governance Support

• Assist in implementing statewide and agency-level AI governance frameworks, standards, and procedures.

• Support documentation requirements for AI use cases, including approvals, change management, audit trails, model descriptions, and compliance reports.

• Maintain alignment with state legislation, executive orders, and IT governance directives applicable to AI usage.

• Help ensure the agency’s AI activities adhere to principles of public transparency, fairness, and accountability.

   

AI Risk Assessment & Compliance

• Conduct AI risk and impact assessments, including evaluations for privacy impact, algorithmic bias, ethical considerations, and public-sector compliance.

• Identify risks related to data integrity, bias, hallucinations, records retention, misuse, and accessibility.

• Support compliance efforts with state and federal laws, including public records requirements, security statutes, accessibility standards, and procurement policies.

• Assist with audit responses, legislative inquiries, and reporting obligations related to AI use.

AI Security & Technical Evaluation

• Evaluate the security posture of AI systems, including vendor-hosted solutions, cloud platforms, and internal models.

• Analyze potential vulnerabilities such as data leakage, model manipulation, prompt injection, and unauthorized access.

• Assist cybersecurity teams in applying state security controls to AI tools, including identity management, encryption, logging, and monitoring.

• Participate in third party and procurement reviews to identify risks associated with external AI providers.

Inventory, Documentation & Reporting

• Maintain the agency’s inventory of AI systems, use cases, and risk levels.

• Document assessments, findings, mitigations, approvals, and governance decisions.

• Assist in preparing reports for statewide oversight bodies or legislative committees, as required by policy or statute.

Education, Training & Stakeholder Engagement

• Provide guidance to staff on responsible AI use, disclosure requirements, and security considerations.

• Support development and delivery of training materials to raise awareness of AI risks and obligations in the public sector.

• Collaborate with IT, legal, compliance, procurement, and program teams to identify requirements and promote secure adoption.

   

Physical Demands and Work Environment

This position works in a comfortable office setting with a computer for a large percentage of the workday. The noise level in the work environment is usually mild. Occasional travel may be required.

Minimum Qualifications

• 2–5 years of experience in cybersecurity, IT risk management, compliance, or public-sector technology roles.

• Understanding of artificial intelligence/machine learning concepts and AI lifecycle basics.

• Knowledge of information security principles, state IT security policies, and data protection requirements.

• Strong analytical and documentation skills with the ability to interpret regulations and apply them to technology systems.

• Ability to communicate clearly with technical and non-technical staff, leadership, and oversight bodies.

Preference will be given to candidates who possess

• Master’s degree in information security, Data Science, Public Administration, or related discipline.

• Experience working in state or local government.

• Knowledge of AI governance frameworks such as NIST AI RMF or ISO 42001.

• Certifications such as Security+, CC, CRISC, CISSP (associate), CIPP, or similar.

• Experience with procurement reviews, third party risk assessments, or statewide technology governance.

   

About OMES

The Office of Management and Enterprise Services provides excellent service, expert guidance and continuous improvement in support of our partners’ goals. We are a highly qualified workforce committed to serve those who serve Oklahomans and make government run in the most efficient, innovative manner possible.

OMES is an Equal Opportunity Employer. Reasonable accommodation to individuals with disabilities may be provided upon request.

Equal Opportunity Employment

The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.

Current active State of Oklahoma employees must apply for open positions internally through the Workday Jobs Hub.

If you are needing any extra assistance or have any questions relating to a job you have applied for, please click the link below and find the agency for which you applied for additional information:

Agency Contact