Full-Time Principal Consultant, AI, Proactive Services

• Conduct comprehensive security assessments of AI systems and tools using frameworks such as:MITRE ATLAS, OWASP Top 10 for LLMs, NIST AI Risk Management Framework (AI RMF)
• Develop and execute assessment plans tailored to foundational models, base models, and SaaS-based AI tools.
• Analyze model architectures, training data pipelines, and deployment environments to identify potential security gaps and vulnerabilities.
• Provide expert guidance on securing AI systems, including:Adversarial ML defenses, Data poisoning prevention, Privacy-preserving AI techniques (e.g., differential privacy).
• Evaluate compliance with regulatory requirements and standards (e.g., GDPR, HIPAA, or emerging AI-specific regulations).
• Collaborate with the client’s cross-functional teams, conducting stakeholder interviews, interactive workshops, and meetings with technical teams and leadership teams.
• Stay up-to-date on the evolving threat landscape in AI and contribute to the development of innovative security solutions.
• Assist in the development of Risk Management, Compliance, and Security standards within professional services.

Responsibilities:

• Maintaining industry knowledge of cybersecurity best practices within GRC.
• Maintaining an understanding of the comprehensive threat intelligence landscape.
• Maintaining an understanding of AI platforms and security best practices.
• Leading or supporting cybersecurity risk assessments, audits, program and policy maturation, incident response exercises.
• Maintaining the ability to work across multiple frameworks and regulatory standards including, but not limited to, NIST, CIS 18, ISO, GDPR, CCPA, SOX, and HIPAA.
• Managing the team, monitoring progress, tracking budget, mitigating risks, and ensuring key stakeholders are kept informed.
• Identifying security risks and vulnerabilities via stakeholder interviews, documentation review, and deep-dive testing.
• Evaluating client controls for compliance with legal, regulatory, privacy, policy, standards and security requirements
• Effectively documenting and communicating audit, assessment, or compliance results, findings, and recommendations to stakeholders
• Scoping new opportunities with prospective clients, including drafting statements of work and proposals
• Meeting travel requirements as needed to meet business demands (on average ~30%)

What is the last date for applying to the job?

Which countries are accepted for this remote job?