AI Governance Lead Analyst

Cambium Learning Group

1d•Remote

About The Position

The AI Governance Lead Analyst uses a broad technology and security background to lead and coordinate teams supporting educational testing business processes, including software development, security testing and monitoring, cloud infrastructure, enterprise IT support, and project and customer management. The role leads AI governance and risk programs and supports the secure development and implementation of generative and agentic AI systems. It is remote-first and requires reliable cable or fiber-optic broadband for remote work, with minimum speeds of 10 Mbps download and 5 Mbps upload. The successful candidate is expected to participate in video-based interviews and ongoing virtual meetings with their camera on.

Requirements

At least 10 years of hands-on experience in cybersecurity.
Demonstrated experience reviewing and advising on AI and machine-learning architectures.
Experience advising on risks, trends, and threats involving AI, machine learning, and emerging technologies, including AI governance and risk assessment aligned with ISO 42001, NIST, and the EU AI Act.
Experience leading projects or strategic initiatives across cross-functional teams responsible for data protection, infrastructure, security operations, and application security.
Experience complying with security and privacy frameworks and industry best practices, including direct participation in internal and third-party audits.
Experience architecting cybersecurity solutions.
Experience monitoring security events in a SOC environment.
Hands-on experience with software development teams as a developer, tester, or reviewer of critical milestones.
Experience reducing technology risks through risk assessments, gap analysis, improvement plans, and tracking actions to closure.
Experience developing and executing project management plans for technical projects.
Ability to communicate and coordinate effectively with senior business leaders, subject matter experts, technical leaders, and third-party consultants.
Ability to deliver results and meet deadlines independently and collaboratively.
Ability to manage and prioritize multiple tasks in a dynamic environment.
Experience implementing and managing AI cybersecurity controls.
Experience with AI threat modeling, security assessments, and/or secure development.
For remote work, a reliable cable or fiber-optic broadband connection with minimum speeds of 10 Mbps download and 5 Mbps upload.
Active participation in video-based interviews and ongoing virtual meetings with camera on; use of note-taking tools, reference materials, or AI-powered tools during selection activities is prohibited without prior written approval.

Nice To Haves

Master’s degree or higher in information security, cybersecurity, computer science, engineering, information systems, or a related technical field.
Extensive and deep knowledge of AI governance, security, and privacy frameworks, standards, and industry best practices.
Strong professional communication and interpersonal skills for communicating with technical experts, subject matter experts, and senior leaders and decision-makers.
Extensive and deep knowledge of tools and techniques used to protect against cybersecurity attacks and respond to incidents.
Information security certifications such as CISSP, GIAC Cloud Security, or AWS Security.
Relevant AI training and certifications related to governance, risk analysis, and agentic security.

Responsibilities

Lead internal programs for AI governance, risk assessments, and secure development and implementation of generative and agentic AI systems.
Review customer requirements and regulatory obligations against current and planned AI usage.
Advise internal stakeholders and teams on AI security and strategy decisions.
Plan and manage improvement projects from requirements through deployment or implementation, meeting customer milestones and security, privacy, and ethical-use benchmarks.
Create a structure to manage AI agents and their activities.
Automate AI governance by identifying and establishing system management tools.
Coordinate internal functional teams to translate strategic objectives into implementable technical requirements and verifiable results.
Respond to information requests from executives, proposal teams, delivery teams, and external third parties.
Support AIMS committee activities and provide solutions.
Ensure programs conform to security standards and applicable frameworks, including ISO 42001, ISO 27001, ISO 27018, privacy laws, ISO 9001, GovRAMP, FedRAMP, NIST 800, SOC, and CIS Top Controls.
Contribute to independent third-party audits of the organization.
Develop, maintain, and improve training programs, campaigns, and content for various teams and roles.
Conduct internal reviews and risk assessments, and report observations and metrics to senior management on an ongoing and as-needed basis.
Examine the organization's security and privacy posture and practices, identify risks or gaps, and recommend improvement programs.
Participate in video-based interviews and ongoing virtual meetings with camera on.