Real ownership from day one
In a small firm, the work you do is the work the client sees. There is no bench and no layer of reviewers between you and the output — you will not spend your first year on the edge of the actual problem.
Careers
Work at the edge of AI governance and cyber risk
AZMA is a small, independent firm working on two things that are becoming hard to separate: how organisations govern artificial intelligence, and how they manage cyber risk and resilience under regulation that is tightening every year.
Current status
Where we stand today
We are not advertising specific vacancies. Rather than show an empty job board, this page says plainly who we look for, how we work, and how to approach us. When a role is open, it will be listed here explicitly — not before.
Why join
Why join AZMA
None of these points requires the firm to be large to be true.
Two disciplines that are converging
AI governance and cyber GRC are moving toward each other: regulation, risk frameworks and assurance all now cross over. You will work where that crossover is, rather than inside one silo.
Direct access to the thinking
You will work alongside the founder, not three levels below the people who decided to take the engagement. Questions get answered by the person who can answer them.
Flexibility with accountability
We care about the quality and timeliness of what is delivered, not about presenteeism. How and where you work is a conversation, not a policy that assumes you are being watched.
Profiles
Who we look for
We are interested in people who can move between frameworks and messy real-world situations, who write clearly, and who do not need a large team to think well. Three profiles fit what we do.
AI Governance / Risk Analyst
You can read a regulation or a standard — the EU AI Act, ISO/IEC 42001, the NIST AI RMF, and the Swiss context around them — and translate it into something a client can act on: a risk register, a governance model, an assessment, a clear memo. You are comfortable with uncertainty and with people who disagree.
Cyber GRC Consultant
You know the difference between a control existing on paper and a control working. You can run a gap assessment, build or repair a risk and compliance programme, talk to both engineers and executives, and connect cyber risk to the requirements coming from regulation and resilience expectations.
Geopolitical / Cyber-Threat Analyst
You can take open-source material, threat reporting or geopolitical developments and produce analysis that is useful to a decision-maker — not a news summary. You understand that state-actor behaviour, cyber operations and influence activity increasingly run together, and you can write it up with discipline and sourcing.
These are profiles we look for, not open positions. If one of them is you, write to us with something specific; if a suitable role opens we will advertise it here.
How to approach us
We keep the process simple and we read every application properly. Write to the address on our contact page with:
- A short note — a few paragraphs is enough — on what you would want to work on at Azma and why this firm specifically.
- Your CV.
- One writing sample or work product you are proud of and can share — an assessment, a memo, a report, a piece of analysis (redact anything confidential).
You can also send a spontaneous application on the same basis: tell us which of the three profiles fits you and what you would want to work on. We are a small firm, so we cannot promise a role will always be open, but we read unsolicited applications and keep good ones on file. If there is no suitable opening right now, we will tell you that plainly rather than leave you waiting; we do not commit to a fixed reply time we might not be able to keep.
Confidentiality
Applications are read by us only. Nothing you send is passed to a third party, and redacted work samples are welcome.
Tell us which profile fits you
If one of the three profiles is you, write to us with something specific about what you would want to work on.