Job Description

Job Title: Security Gen AI Security and NIST Framework Consultant

Job Description: Security Consultant responsible for leading AI/GenAI security assessments, governance reviews, risk evaluations, and compliance initiatives while establishing secure AI adoption practices aligned with NIST AI RMF, ISO 42001, and enterprise security standards.

Location: Toronto, ON - Hybrid (2-3 Days WFO)

Contract Duration: 6-12 Month Contract

Key Responsibilities

• Lead end-to-end AI Security Assessment engagements, including planning, execution, reporting, and stakeholder management.
• Conduct AI and Generative AI security, governance, risk, and compliance assessments.
• Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
• Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
• Perform AI threat modeling and identify risks such as:
• Prompt Injection
• Data Leakage
• Model Abuse
• Supply Chain Vulnerabilities
• Evaluate controls against:
• NIST AI Risk Management Framework (AI RMF)
• ISO 42001
• OWASP LLM Top 10
• Enterprise Security Standards
• Develop gap assessments, risk ratings, maturity assessments, and remediation roadmaps.
• Create executive-level reports, presentation materials, and security recommendations.
• Provide strategic guidance for secure AI adoption, governance, and operationalization.
• Manage project governance, timelines, risks, issues, and stakeholder communications.
• Support AI security program development and responsible AI initiatives.

Core Qualifications

• 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
• Proven experience leading enterprise security assessments and advisory engagements.
• Strong expertise in:
• AI Security
• Generative AI Security
• AI Governance
• Responsible AI
• AI Risk Management
• Deep understanding of:
• Large Language Models (LLMs)
• AI/ML Security
• Prompt Security
• Model Security
• Experience with:
• NIST AI RMF
• MITRE ATLAS
• AI Threat Modeling
• Security Risk Assessments
• Experience assessing cloud-based AI services and AI-enabled applications.
• Strong knowledge of Microsoft Copilot and Azure OpenAI security controls.
• Experience with security compliance, governance, and regulatory frameworks.
• Strong stakeholder management, workshop facilitation, and consulting skills.
• Excellent executive communication and presentation skills.

Preferred Qualifications

• Experience implementing AI governance frameworks within large enterprises.
• Experience supporting Microsoft Copilot, Azure OpenAI, or enterprise GenAI initiatives.
• Knowledge of ISO 42001 and emerging AI regulations.
• Experience working with cloud security architectures across Azure, AWS, and GCP.
• Experience building AI security roadmaps and maturity improvement programs.
• Relevant cybersecurity certifications such as CISSP, CCSP, CISM, or equivalent.

Key Skills

• Artificial Intelligence (AI)
• Generative AI
• AI Security
• GenAI Security
• Large Language Models (LLMs)
• AI Governance
• Responsible AI
• NIST AI RMF
• ISO 42001
• MITRE ATLAS
• OWASP LLM Top 10
• Threat Modeling
• Microsoft Copilot Security
• Azure OpenAI
• Cloud Security
• Risk Management
• Security Assessments
• Compliance
• Cybersecurity
• Stakeholder Management
• Security Consulting
• Executive Reporting