Senior Enterprise Risk Operations Specialist
ReflectionVisit Reflection website
Reflection is an AI research lab building open frontier models and a full AI stack for developers, enterprises, and public-sector users.
New York, United States
Funding history
About Reflection
Reflection develops open-weight AI models, open-source software for customizing and running agents, AI-factory infrastructure, and related solutions. Its current research emphasizes large language models, reinforcement learning, and agentic reasoning.
Skills
About the Role
You will operate audit-ready risk programs across commercial support, third-party risk, controls assurance, and issue management. You will assess vendors and customers, validate controls, manage remediation and exceptions, and report risk status to leadership.
Requirements
- 7+ years of experience in risk operations, compliance, internal audit, information security, or a related discipline
- Experience building operational risk programs, including controls assurance, third-party risk management, issue management, or incident response
- Experience delivering risk assessments, certifications, or security questionnaires for go-to-market or enterprise sales
- Technology risk operations experience
- Knowledge of AI system risk evaluation, safety testing, and AI model operational lifecycles
- Experience with auditors, regulators, or enterprise customers in regulated environments
- Proficiency with risk management tools and GRC platforms
- Knowledge of evidence management, controls testing, and incident tracking
Responsibilities
- Drive risk assessments and certifications for commercial opportunities
- Partner on customer risk assessments and due diligence requests
- Maintain reusable risk assessment artifacts and evidence packages
- Conduct third-party and vendor due diligence and monitoring
- Design and operate a third-party risk management program
- Validate policy, standards, control, and guardrail effectiveness
- Design and execute controls testing programs
- Identify, escalate, and remediate control gaps
- Operate the risk issue and exception management lifecycle
- Report issues, remediation progress, exceptions, and systemic risk trends
Benefits
- Equity
- Stock options
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Annual wellness allowance
- Daily office lunch and dinner
- 22 weeks of paid parental leave
- Unlimited paid time off in the U.S.
- 30 days of vacation in the U.K.
- Visa sponsorship support
- Regular off-sites, happy hours, and team celebrations
