Willing to start a new freelance challange? Get in touch.

What You'll Do

- Strengthen the IT risk and AI governance framework across a complex technology environment.
- Assess risks related to AI models, GenAI/LLMs, training data, cloud solutions, ICT services and third-party providers.
- Perform business and technology risk assessments covering operational, cyber, regulatory, contractual and resilience risks.
- Translate requirements from the EU AI Act, DORA, GDPR and relevant cyber-resilience regulations into practical controls and governance requirements.
- Develop and maintain AI risk assessments, risk registers, control frameworks and remediation plans.
- Advise IT, Architecture, Cybersecurity, Data and Digital teams on risk and compliance implications of new AI and technology initiatives.
- Assess strategic technology suppliers, outsourcing arrangements, critical ICT services and exit strategies.
- Define and monitor remediation actions with stakeholders through to completion.
- Develop risk indicators, dashboards and management reporting for senior stakeholders.
- Support internal and external audits, regulatory reviews and supervisory inspections.
- Embed risk, compliance, operational resilience and fraud considerations into AI-enabled transformation programmes.

What you bring

- 8-10+ years of professional experience in IT Risk, IT Governance, IT Audit, Technology Risk,



Operational Risk or a closely related discipline.
- Strong experience in IT risk assessment, governance, controls and remediation within a regulated environment.
- Practical experience with AI governance, AI risk management and/or GenAI/LLM risk.
- Good working knowledge of the EU AI Act, including risk classification, governance and compliance implications.
- Strong understanding of DORA, GDPR, ICT risk, outsourcing and third-party risk management.
- Experience assessing risks associated with AI models, data, LLMs, cloud services or AI solutions delivered by third parties.
- Understanding of cybersecurity and operational resilience risks affecting AI and cloud environments.
- Experience working across IT, Architecture, Cybersecurity, Data and Digital/AI teams.
- Ability to translate regulatory requirements into pragmatic controls, recommendations and remediation actions.
- Strong stakeholder management and communication skills, including the ability to challenge senior technology stakeholders constructively.
- Experience preparing risk reports, dashboards, governance documentation and audit/regulatory evidence.

Interested? Apply today!

myNEBIRU: Not into this role, but interested in what NEBIRU does? That’s totally fine.

Visit to see how we can support you - even outside our client missions. Let’s build the bridge to your next step, together.

📌 Ai risk & governance consultant (España)
🏢 NEBIRU
📍 España