Review and assess Generative AI implementations to identify risks and ensure compliance with enterprise policies, industry standards, and regulatory frameworks.
Design and implement security controls aligned with both IT systems and business objectives, with emphasis on AI-specific risks.
Develop and apply AI risk models aligned with NIST AI RMF, ISO/IEC 42001, and other emerging frameworks.
Integrate AI risk considerations into enterprise governance processes; lead or support reviews of AI and emerging technology deployments.
Apply threat modeling techniques such as the OWASP Top 10 for LLMs to identify, prioritize, and mitigate AI-specific risks.
Collaborate with cross-functional teams (engineering, data science, compliance, product) to embed security into AI solution design and deployment.
Continuously monitor emerging trends in AI governance, security standards, and enterprise risk management best practices.

Requirements

Strong understanding of AI risk management, with working knowledge of NIST AI RMF and ISO/IEC 42001
Experience in information security with proven ability to assess and implement controls for IT and cloud environments
Familiarity with AI threat models (e.g., OWASP LLM Top 10) and risk mitigation strategies
Strong grasp of cybersecurity fundamentals, IT risk, and enterprise governance
Excellent communication skills, with ability to translate technical risks into business-aligned narratives
Certifications: CISSP, CISA, CISM, or relevant AI governance certifications (e.g., ISACA AI Governance)

Benefits

Medical, Dental, & Vision Plans
401(k)
FSA/HSA
Commuter Benefits
Tuition Assistance Plan
Vacation and Sick Time
Paid Parental Leave

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

AI risk managementNIST AI RMFISO/IEC 42001threat modelingOWASP LLM Top 10information securitycloud securityrisk mitigation strategiescybersecurity fundamentalsenterprise governance

Soft Skills

communication skillscollaborationcross-functional teamworktechnical risk translation

Certifications

CISSPCISACISMAI governance certifications