Lead Information Security Analyst, Continuous AI Risk Management Expert (T & I) (Telework/Hybrid)
Core
Design, build, and lead the enterprise-wide governance, security, and continuous risk management program for artificial intelligence (traditional and generative) across the Corporation.
Role type
Lead Information Security Analyst (AI Risk Management)
Builds
Enterprise AI risk assessment framework, centralized AI inventory, security testing protocols, and governance maturity dashboards.
Domain
Public Service Media / Information Security / AI Governance
Deliverable
production ML models | dashboards & analysis | client delivery
Required skills
AI risk assessment methodology design, AI lifecycle security evaluation, adversarial testing for LLMs, third-party AI vendor risk assessment, AI inventory management, risk register maintenance, industry standards implementation (ISO/NIST/COBIT), cloud and network security architecture, data security principles.
Preferred skills
Relevant professional security certifications (CISSP, CRISC, CBCP, CISA, CISM), experience translating complex AI concepts for non-technical stakeholders.
Technologies
ISO/IEC 27001, NIST SP 800-53, COBIT, ITIL, LLMs, SaaS APIs, Cloud environments, Firewalls, IDS/IPS.
Responsibilities
Design and deploy AI risk assessment frameworks including ethical impact matrices and bias analysis; maintain centralized registry of all AI systems and models; conduct continuous model risk assessments and security testing; evaluate third-party AI and SaaS solutions; manage AI risk register; assess program maturity via KPIs and KRIs.
Seniority
Senior, hands-on IC with strategic governance oversight.
