Governance Risk & Compliance Analyst III

We are driven to do more. More for our customers and the financial professionals who offer our products. If you are driven to do more and love the challenge of pursuing more, Athene is your kind of company. You will find we offer more than the basics to create an inclusive and dynamic work environment at our various locations.

Purpose:

Athene is seeking a Governance Risk & Compliance Analyst III to support enterprise technology risk management and IT audit/compliance activities. This role partners closely with IT, Cybersecurity, Internal Audit, and Risk Management to assess risk, strengthen controls, and ensure regulatory and audit readiness in a highly regulated financial services environment. This position offers the opportunity to make a measurable impact in a fast-paced, collaborative environment while helping to advance Athene’s security posture and regulatory compliance.

This position is ideal for an experienced professional with a balanced background in IT risk, governance, and IT audit, who can operate independently while influencing stakeholders across the organization.

Accountabilities:

IT Risk Management & Governance 

• Conduct internal cyber risk assessments to identify risks, control gaps, and improvement opportunities. 

• Manage, track, and report on enterprise technology risks, maintaining an up-to-date risk register. 

• Maintain and enhance IT and cybersecurity controls, policies, and standards aligned to industry frameworks (e.g., NIST) and regulatory requirements (e.g., BMA, NYDFS). 

• Facilitate ongoing assessments of IT governance and compliance processes. 

• Support cybersecurity metrics, KPIs, and reporting for governance and leadership review. 

 

AI & Emerging Technology Risk 

• Support the identification, assessment, and ongoing monitoring of risks associated with artificial intelligence (AI) and emerging technology use cases. 

• Partner with technology, legal, compliance, and risk stakeholders to assess AI use cases for governance, control design, and regulatory readiness. 

• Monitor adherence to AI governance standards, policies, and risk management practices, including documentation and control evidence. 

• Support audit and regulatory inquiries related to AI usage, data governance, and technology risk controls. 

 

Third-Party & Vendor Risk 

• Perform due diligence on key vendors, including assessment of SOC 1 and SOC 2 reports. 

• Monitor third-party risk scores (e.g., BitSight) and coordinate follow-up on relevant findings. 

• Respond to security questionnaires and assessments from business partners, providing clear insight into Athene’s security controls and processes. 

 

Audit & Regulatory Compliance 

• Partner with Internal Audit and IT teams on technology audits, including scoping, evidence collection, and remediation tracking. 

• Coordinate with external auditors to support SOX IT control testing and request fulfillment. 

• Monitor compliance with key regulatory requirements (e.g., NYDFS) and support readiness for emerging cybersecurity regulations. 

 

Cybersecurity Program Support 

• Track vulnerabilities identified through Athene’s threat and vulnerability management program and support remed