Senior Director AI Security

Senior Director AI Security

The Senior Director AI Security is responsible for establishing, leading, and continuously maturing the enterprise AI Security program. Reporting directly to the Chief Information Security Officer, this leader develops the organization's strategy for securing Artificial Intelligence technologies while enabling responsible innovation across the enterprise.

The Senior Director serves as the executive leader responsible for governance, security architecture strategy, risk management, secure adoption, regulatory compliance, and operational oversight of AI technologies, including Generative AI, Large Language Models (LLMs), AI agents, machine learning platforms, autonomous systems, and emerging AI capabilities. This role partners closely with executive leadership, Enterprise Architecture, Data & Analytics, Legal, Privacy, Technology, Procurement, Risk Management, Internal Audit, and business leaders to ensure AI technologies are implemented securely, responsibly, and in alignment with business objectives.

They will recruit, develop, and lead a high-performing team of AI security architects, engineers, and specialists.

Essential Functions

• Develop and execute the enterprise AI Security strategy, operating model, governance framework, and multi-year roadmap.
• Establish enterprise AI security standards, policies, reference architectures, and secure development requirements for AI technologies.
• Lead AI security risk management including model governance, third-party AI assessments, AI inventory, threat modeling, and regulatory compliance.
• Build and lead the AI Security organization including hiring, mentoring, budgeting, strategic planning, and operational execution.
• Partner with technology, architecture, engineering, legal, privacy, procurement, and business leaders to securely enable enterprise AI adoption.
• Oversee AI security architecture reviews, secure design approvals, and security assessments for enterprise AI initiatives.
• Monitor emerging AI threats, vulnerabilities, adversarial AI techniques, regulatory developments, and industry best practices, adjusting strategy accordingly

Additional Responsibilities

• Develop enterprise standards for acceptable AI usage.
• Establish AI model governance processes.
• Define AI security review requirements for all new AI initiatives.
• Build enterprise AI risk assessment methodologies.
• Create AI security metrics and executive dashboards.
• Represent Information Security on enterprise AI governance committees.
• Perform additional duties as assigned by the Chief Information Security Officer.

Skills and Abilities

• Deep understanding of LLMs, generative AI, and model lifecycle., Required
• Strong knowledge of data privacy, model governance, and adversarial AI/ML, Required
• Proven understanding of business focus and processes, and ability to inject cybersecurity into the business through teamwork and influence., Required
• High level of integrity and trustworthiness, as well as confidence to represent the company and security leadership with the highest level of professionalism., Required

Qualifications

• Bachelor's Degree in computerscience, Information Security, Engineering, Data Science or related field, Required
• Master's Degree in Computer Science, Information Security, Engineering, Data Science or related field, Preferred
• 10 years or more in Progressive cybersecurity leadership, Required
• 3 years or more in experience designing, implementing, and securing AI/ML, Required
• 2 years or more in experience in Amazon Web Services (AWS), Google Cloud Platform (GCP) and/or Microsoft Azure cloud computing security configuration and management., Required
• 2 years or more in experience in application security with an emphasis on AI/ML, Required
• 5 years or more in leading security architecture or engineering organizations, Required
• Demonstrated project management, multitasking and organizational skills. Advanced, Required
• Knowledge of industry accepted risk management frameworks and standards such as the NIST AI Risk Management Framework, NIST Risk Management Framework (RMF), NIST Privacy Framework, etc. Advanced, Required
• Knowledge of industry accepted Information Security frameworks and standards such as the NIST Cybersecurity Framework (CSF), ISO27001, ISO 42001, NIST 800 Series, OWASP GenAI Security Project, etc. Advanced, Required
• Advanced in AI Security Management (AAISM), Preferred, 1 Year
• Certified Secure Software Lifecycle Professional (CSSLP), Preferred, 1 Year
• Certified Information Systems Security Professional (CISSP), Required, Upon Hire
• Certified Cloud Security Professional (CCSP), Preferred, 1 Year

Travel: Yes, 10-20%

Job Category: Information Security