Responsibilities
- Drive security intake, risk assessment, and ongoing oversight of enterprise AI use cases, platforms, models, and third-party vendors.
- Lead technical risk assessments and threat modeling covering data protection, identity and access, integration patterns, model and agent behavior, and emerging AI attack surfaces.
- Design and recommend practical, scalable controls aligned with enterprise security standards and secure-by-design principles.
- Partner with Legal, Privacy, Procurement, IT, Engineering, and business stakeholders to advance regulatory, contractual, and governance objectives related to AI.
- Shape AI governance policies, standards, and operating procedures, and prepare materials for governance reviews.
- Help build the end-to-end operating model for securing AI, from intake through approval and monitoring.
- Apply program and system-level thinking across functions to drive consistency and scale.
- Anticipate emerging AI risks and recommend adjustments to controls, processes, and standards.
- Strengthen enterprise information security risk management aligned with ISO 27001, NIST CSF 2.0, NIST AI RMF, and ISO/IEC 42001.
- Conduct technical and business process risk assessments and document treatment recommendations.
- Support internal and external audits with metrics, evidence, and analysis, and drive remediation activities.
Requirements
- Five days per week on-site at either the Milpitas or Irvine office.
- Senior, hands-on role for an experienced security professional who can operate independently, influence cross-functional stakeholders, and translate emerging technology risks into practical, scalable governance solutions.
Work Arrangement
On-site — Milpitas, Irvine
Additional Information
- This position requires five days per week on-site.
