AI Security Consulting Director
CNA Financial Corporation2 months ago
Base Salary
$97k - $189k/yr
Responsibilities
- Serve as the AI Security technical reviewer within the AI Governance review process.
- Conduct architecture and design reviews of AI/ML, GenAI, LLM, and agentic initiatives.
- Develop RFI/RFP evaluation criteria and test, validate, and benchmark candidate AI security solutions.
- Perform threat modeling and security risk assessments for AI systems, models, and data pipelines.
- Evaluate AI workload security across AWS and Google Cloud and recommend secure configurations.
- Apply NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS to security reviews and assessments.
- Develop AI security standards, reference architectures, and best-practice guidance.
- Integrate AI security controls into SDLC, CI/CD, and DevSecOps workflows.
- Support vulnerability management, security monitoring, and incident readiness for AI systems.
- Provide technical security input to Risk, Legal, and AI Governance teams and track emerging AI threats and attack techniques.
Requirements
- Bachelor’s degree in a relevant technical discipline is required.
- At least 5 years of information security experience, including exposure to cloud and AI/ML environments, is required.
- Hands-on experience with security architecture and design reviews and public cloud security is required.
- Strong knowledge of AI/ML, GenAI, and LLM security concepts and attack and defense techniques is required.
- Experience designing and executing solution testing, proofs of concept, and technical validations is required.
- Ability to write technical assessments and evaluation criteria and translate technical risk into actionable recommendations is required.
- Relevant certifications such as CISSP, CCSP, GIAC, or AI/cloud security credentials are preferred.
- Insurance or financial services experience is preferred.
Benefits
- CNA offers a comprehensive benefits package supporting employees’ and family members’ physical, financial, emotional, and social wellbeing.
- The role is hybrid, as indicated by the posting’s #LI-Hybrid designation.