Risk and compliance interview prep when AI can flag a gap

Check the control evidence, name who can act and explain what risk remains.

What companies say they’re looking for

01 Test the control and check what happened

“Design and run a risk-based control testing plan (design and operating effectiveness), ensuring repeatability and traceability” (opens the source)

Bitpanda Careers, Specialist, Information Security posting · Bitpanda Careers, Undated

Check which paths have a review gate and which releases received a review.

“keeping our control environment in lockstep with our expansion” (opens the source)

Nita Patel, Group Chief Compliance Officer, Wise · Wise Careers, Feb 23, 2026

Include the bulk-import path when you measure coverage.

Risk and compliance interview practiceDid the release review cover both paths?Example

02 Check what a vendor test covers

“We also implemented periodic risk reviews to evaluate service providers’ capabilities in maintaining service continuity” (opens the source)

Soh Kian Tiong, Chief Risk Officer, DBS Group Holdings · DBS, Mar 9, 2026

Check which service and dependency the recovery exercise covered.

“Assess the provider’s documentation for the application’s capabilities, limitations, safeguards, and monitoring features to support responsible deployment.” (opens the source)

Microsoft, 2026 Responsible AI Transparency Report · Microsoft, Sep 1, 2026

Ask the provider for evidence specific to the use you want to approve.

Risk and compliance interview practiceWhat vendor scope can the owner approve?Example

03 Name an escalation owner and due time

“Track decisions, owners, due dates, mitigations, exceptions, and residual risks.” (opens the source)

WPP Careers, Senior Technology Risk Analyst posting, London · WPP Careers, Undated

Verify the count and record who will give the next update.

Risk and compliance interview practiceWho takes the escalation?Example

04 Check the AI review queue

“Our work increasingly focuses on controls such as agent identities, tool permissions, and monitoring of actions.” (opens the source)

Natasha Crampton, Chief Responsible AI Officer, Microsoft · Microsoft On the Issues, Sep 1, 2026

Use the independent impact tags to find which items still need review.

Risk and compliance interview practiceWhich items need human review in the AI pilot?Example

05 Explain the risk that remains

“Support cross-functional decisions by making the relevant evidence, trade-offs, dependencies, limitations, and residual risks clearly understood and visible” (opens the source)

Wise Careers, AML Senior Product Compliance & Risk Manager, APAC posting · Wise Careers, Oct 30, 2026

Show the capacity limit, the remaining exposure and who can approve the exception.

Risk and compliance interview practiceWhat residual risk can the service owner consider?Example

Sources

Bitpanda Careers, Specialist, Information Security posting, at the time. Bitpanda Careers, “Specialist, Information Security”, Undated. Open the source. Checked against the published text.
Nita Patel, Group Chief Compliance Officer, Wise, at the time. Wise Careers, “Shaping the future of global compliance at Wise”, Feb 23, 2026. Open the source. Checked against the published text.
Soh Kian Tiong, Chief Risk Officer, DBS Group Holdings, at the time. DBS, “2025 Annual Report, Chief Risk Officer statement”, Mar 9, 2026. Open the source. Checked against the published text.
Microsoft, 2026 Responsible AI Transparency Report, at the time. Microsoft, “2026 Responsible AI Transparency Report”, Sep 1, 2026. Open the source. Checked against the published text.
WPP Careers, Senior Technology Risk Analyst posting, London, at the time. WPP Careers, “Senior Technology Risk Analyst”, Undated. Open the source. Checked against the published text.
Natasha Crampton, Chief Responsible AI Officer, Microsoft, at the time. Microsoft On the Issues, “Responsible AI in 2026: How we are adapting for what’s ahead”, Sep 1, 2026. Open the source. Checked against the published text.
Wise Careers, AML Senior Product Compliance & Risk Manager, APAC posting, at the time. Wise Careers, “AML Senior Product Compliance & Risk Manager - APAC”, Oct 30, 2026. Open the source. Checked against the published text.

Last reviewed Nov 11, 2026