Sr. Consultant - Artificial Intelligence (AI) Risk Management | Remote, USA
Optiv - Charlotte, NC
posted 2 days ago
About the position
This position will be fully remote and can be hired anywhere in the continental U.S. Our Senior Consultants are skilled technical and consultative resources expected to be strong in both technical and soft skills. A Senior Consultant must be a proven self-starter with the ability to problem-solve, communicate, participate in diverse project teams from a technical perspective, and interface effectively with customers, vendor partners, and colleagues. The Artificial Intelligence (AI) Risk Management Senior Consultant has strong experience in machine learning (ML), data classification, data governance, AI risk management, AI compliance requirements and large language models (LLMs). The ideal candidate will understand a wide range technologies, AI and ML compliance requirements, Global security and compliance frameworks to identify risks and remediation options and manage compliance within different environments. This role will focus on building and delivering strategy, risk management and compliance capabilities to secure and manage (AI/ML) program technologies. Candidates must have a strong aptitude for learning and communicating perspectives on cybersecurity, risk management, compliance, and AI/ML.
Responsibilities
- Research new and emerging compliance capabilities and risk management techniques to continually evolve Optiv's security expertise around AI/ML strategy
- Partner with Optiv technical experts in application, data, and operational security to build and implement leading practices for developing secure AI/ML systems
- Author regular status updates and final deliverables during client engagements
- Perform AI/ML readiness assessments, control assessments, maturity assessments, threat modeling, risk assessments and advanced advisory activities through client services engagements
- Provide tactical and strategic guidance and detailed remediation advice to help clients achieve stronger security postures and lower risk
- Build and maintain professional relationships with client stakeholders and provide them with information about application security and secure development lifecycle topics
- Track and monitor current and trending practices for governing, managing, and deploying AI/ML applications and solutions
- Lead and contribute to the development of AI/ML services, delivery processes, and capabilities across the team
- Mentor and train team members in approaches to help scale Optiv's AI/ML strategy and risk services
- Leverage and extend existing tools to help evolve Optiv's AI/ML control testing methodologies and processes
- Assist with evaluating AI/ML security market solutions for comparative efficacy and suitability to client needs
- Obtain and evolve personal technical expertise, certifications, and industry credentials through formal and informal training and other learning initiatives
- Contribute content to the Optiv blog and present on risk management topics via webinars, security conferences, and other events
- Review the work of other team members to confirm deliverables are of the highest quality
- Identify and recommend improvements in Optiv's methodologies and internal processes and provide input and support for updating consulting tools, techniques, and knowledgebase
- Establish and maintain productive relationships with the wider delivery team, practice management, and client management teams
Requirements
- Bachelor's degree preferred with approximately 5-7 years of related work experience
- Approximately 4-7 years of technical architecture experience
- Experience with cloud technologies (Azure/AWS/GCP/Cloud)
- Desirable experience within one or more of the following Security Architecture and/or Enterprise Architectural Frameworks (e.g. SABSA, TOGAF, O-ESA)
- Knowledge of general security concepts and methods such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures and governance
- Understanding of and/or deep expertise in at least one standard compliance framework or regulatory standard including NIST CSF, NIST 800-53, ISO 270xx, HIPAA, HITRUST, PCI, or other
- Ability to travel 20% of the time to client sites
- One or more years of experience with AI risk management and/or compliance
- Experience leveraging specialized tools to test controls related to AI/ML systems
- Working knowledge of machine learning, security techniques, and controls for AI/ML
- Familiarity with at least one of the following standards: ENISA, EU AI Act, NIST AI RMF, OWASP Top 10 lists for LLMs and/or MITRE ATLAS
- General working knowledge of Microsoft Azure and CoPilot, OpenAI, ChatGPT, Gemini, Amazon Q, Bedrock or other LLM or AI models
- Ability to explain the various machine learning risks and compensating controls
- Experience training or educating technical and non-technical audiences about AI/ML security
- Knowledge of AI risks such as bias, hallucination, prompt injection and others
- Ability to work with diverse and dynamic teams
- Ability to think critically and creatively solve complex problems
- Excellent verbal and written communication skills
- Bachelor's or master's degree in computer science, software engineering, data science, or cybersecurity or equivalent experience
- Hold one or more security certifications: CISSP, CISA, CRISC, ISO 27001 lead auditor/implementer, or IAPP
Benefits
- A company committed to championing Diversity, Equality, and Inclusion through our Employee Resource Groups.
- Work/life balance
- Professional training resources
- Creative problem-solving and the ability to tackle unique, complex projects
- Volunteer Opportunities. "Optiv Chips In" encourages employees to volunteer and engage with their teams and communities.
- The ability and technology necessary to productively work remotely/from home (where applicable)
