AI Security Analyst

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Risk Management, Data Science, Business Administration, or a related field.
• Professional experience in cybersecurity, information security, technology risk management, governance, risk and compliance, privacy, audit, or a related discipline.
• Knowledge of cybersecurity risk assessment methodologies, security controls, governance processes, and compliance practices.
• Understanding of artificial intelligence, machine learning, generative AI, large language models, or other emerging technology concepts.
• Experience reviewing technology solutions, vendors, systems, or applications for security, privacy, compliance, or operational risk.
• Experience developing or maintaining policies, standards, procedures, guidelines, risk assessments, or governance documentation.
• Knowledge of data security, privacy, access control, third-party risk, information governance, and secure technology adoption principles.
• Strong research, analytical, problem-solving, and risk evaluation skills.
• Strong written and verbal communication skills.
• Ability to prepare clear reports, presentations, recommendations, and technical documentation.
• Ability to communicate security and risk concepts to technical teams, business stakeholders, leadership, and executive audiences.
• Ability to collaborate effectively across legal, privacy, procurement, technology, security, and business functions.
• Ability to manage multiple assignments, priorities, assessments, and stakeholder requests.
• Ability to work independently while contributing effectively within a cross-functional team environment.

Preferred Qualifications

• Experience supporting an AI governance, AI security, responsible AI, or emerging technology risk management program.
• Experience performing security or risk assessments involving artificial intelligence, machine learning, generative AI, or automated decision-making technologies.
• Experience with Governance, Risk, and Compliance programs or platforms.
• Experience conducting third-party security reviews, vendor risk assessments, or technology due diligence.
• Familiarity with recognized AI governance, cybersecurity, privacy, or risk management frameworks.
• Experience developing security awareness, privacy awareness, or responsible technology-use training.
• Knowledge of public-sector cybersecurity, procurement, privacy, records management, or regulatory requirements.
• Experience working in a government, public-sector, critical infrastructure, or highly regulated environment.
• Relevant professional certifications in cybersecurity, privacy, audit, risk management, cloud security, or artificial intelligence governance.

Knowledge, Skills, and Abilities

• Knowledge of AI governance, AI security, responsible AI, and technology risk management principles.
• Knowledge of cybersecurity policies, standards, controls, frameworks, and regulatory requirements.
• Knowledge of security and privacy risks related to AI model development, deployment, operation, and third-party use.
• Understanding of risks associated with sensitive data exposure, unauthorized AI use, inaccurate outputs, model manipulation, data poisoning, prompt injection, and inappropriate automated decision-making.
• Ability to evaluate AI use cases from cybersecurity, privacy, compliance, legal, operational, and reputational perspectives.
• Ability to interpret policies, standards, laws, regulations, and contractual requirements.
• Ability to translate technical and regulatory requirements into practical security controls and business guidance.
• Ability to identify risk, assess potential impact, and recommend reasonable mitigation strategies.
• Ability to conduct research and remain informed about rapidly changing AI technologies, threats, and regulatory expectations.
• Ability to create clear, organized, and defensible governance and risk documentation.
• Ability to facilitate discussions and build consensus among stakeholders with different technical and business priorities.
• Strong attention to detail, sound professional judgment, and commitment to confidentiality.
• Strong organizational, time-management, presentation, and interpersonal skills.