We are seeking an experienced Consulting Director, AI Security to lead enterprise AI security strategy, cloud security architecture, and risk governance initiatives. The ideal candidate will have extensive experience in cybersecurity, cloud security, artificial intelligence (AI), machine learning (ML), Generative AI, and Large Language Model (LLM) security.
Key Responsibilities
- Define and evolve the enterprise AI security strategy, roadmap, and architecture in alignment with business objectives and risk tolerance.
- Design and implement secure AI/ML, GenAI, and LLM architectures across public cloud environments.
- Lead threat modeling, risk assessments, vulnerability evaluations, and security reviews of AI systems, models, applications, and data pipelines.
- Establish AI security policies, standards, controls, and best practices aligned with industry frameworks, including NIST and OWASP.
- Integrate security controls into the software development lifecycle (SDLC), CI/CD pipelines, and DevSecOps practices.
- Provide architectural guidance on securing AI workloads, cloud infrastructure, APIs, data platforms, and model-hosting environments.
- Assess AI-specific threats, including prompt injection, sensitive data exposure, model abuse, insecure integrations, and unauthorized access.
- Collaborate with Legal, Risk, Privacy, Compliance, and AI Governance teams to address regulatory and organizational requirements.
- Evaluate AI security tools, technologies, and solutions to improve threat detection, vulnerability management, monitoring, and incident readiness.
- Oversee security initiatives across data security, application security, identity security, endpoint security, and cloud security.
- Translate complex technical risks into clear business insights, risk assessments, and actionable recommendations for senior executives.
- Serve as an enterprise subject matter expert (SME) for AI security and advise technology and business stakeholders.
- Lead security programs, manage project delivery, and drive continuous improvement across enterprise AI security initiatives.
Mandatory Technical Skills
- 10+ years of experience in information security, cybersecurity, cloud security, or related disciplines.
- Strong hands-on experience with public cloud security, particularly AWS and Google Cloud Platform (GCP).
- Expert understanding of AI/ML security, Generative AI, LLM architectures, and AI-specific threat models.
- Deep expertise in cloud security architecture, security controls, and defense-in-depth principles.
- Broad cybersecurity knowledge spanning data security, application security, identity and access management, endpoint security, and infrastructure security.
- Strong understanding of DevSecOps, secure software development, CI/CD security, and vulnerability management.
- Experience conducting threat modeling, security assessments, risk analysis, and architecture reviews.
- Knowledge of security frameworks and standards, including NIST and OWASP.
- Understanding of global regulations, privacy requirements, legal considerations, and enterprise risk governance.
- Strong program management, stakeholder management, and executive communication skills.