Principal AI Governance & Security Engineer
Toyota USA4 days ago
Plano, TX, USAStaff+
Responsibilities
- Design and maintain an enterprise AI governance framework covering AI use-case and model lifecycles from intake through retirement.
- Operationalize intake, risk classification, control design, approvals, monitoring, remediation, and staged enforcement.
- Define proportional AI and model-risk controls using SR 11-7, NIST AI RMF, the EU AI Act, and ISO/IEC 42001.
- Own the Agent Registry and AI inventory, including registration, versioning, and prevention of shadow-AI deployments.
- Perform AI threat modeling and risk assessments covering prompt injection, data poisoning, adversarial attacks, model theft, and data exfiltration.
- Design agent guardrails, sandboxing, non-human identity, secrets management, least-privilege access, and mediated tool access.
- Build AI incident-response playbooks, lead red-team exercises, and integrate audit logging with enterprise SIEM capabilities.
- Embed with use-case, product, and platform teams to design and ship governed AI and agentic solutions.
- Build guardrail services, evaluation pipelines, agent and MCP registrations, and human-in-the-loop approval flows using AWS services, Cedar policies, Lambda, and Step Functions.
- Lead design reviews, establish engineering standards, and mentor engineers across governance and security controls.
Requirements
- 12+ years of software engineering experience with demonstrated AI/ML/data governance and AI information-security experience.
- Experience designing and implementing enterprise AI or data governance frameworks and operational governance processes in production.
- Ability to translate security, risk, privacy, and compliance requirements into executable controls, measurable tests, and working software.
- Deep understanding of AI/model risk and responsible AI principles, including SR 11-7, NIST AI RMF, the EU AI Act, and ISO/IEC 42001.
- Practical AI security expertise in threat modeling, guardrails, identity and access management, secrets management, and least-privilege design.
- Experience governing and securing GenAI, RAG, and agentic systems, including registries, MCP or comparable tool mediation, and evaluation frameworks.
- Strong software, data-engineering, or automation skills with production experience on a major cloud platform; AWS is preferred.
- Strong communication skills for explaining technical AI risks and control gaps to engineers and senior executives.
- Preferred experience governing or securing enterprise AI or GenAI programs in financial services or another regulated industry.
- Preferred hands-on experience with Bedrock, AgentCore, Bedrock Guardrails, Cedar, LLM-as-judge, trajectory evaluation, NeMo Guardrails, or Llama Guard.
- Relevant certifications such as CISSP, CCSP, CRISC, CISA, a Certified AI Security/Governance credential, or a model-risk certification are preferred.
Benefits
- Team-oriented, flexible, and respectful work environment.
- Professional growth and development programs with tuition reimbursement.
- Team Member Vehicle Purchase Discount and, if applicable, Toyota Team Member Lease Vehicle Program.
- Comprehensive health care and wellness plans for employees and families.
- Toyota 401(k) Savings Plan with company match and, if applicable, an annual employer retirement contribution.
- Paid holidays and paid time off.
- Referral services for prenatal services, adoption, childcare, schools, and more.
- Tax-advantaged accounts including HSA, Health Care FSA, and Dependent Care FSA.
- Relocation assistance, if applicable.
About Toyota USA
Toyota USA (Toyota Motor North America) manufactures and sells Toyota cars, trucks, and SUVs for U.S. customers, and provides financing and mobility services. Founded in 1957 and headquartered in Plano, Texas, it oversees North American operations and plants that build models like the Camry and Tundra, and is expanding battery and EV production in Kentucky and North Carolina.