AI Security Consulting Director

CNA • Chicago, IL

2d • Hybrid

About The Position

The Consulting Director, AI Security is a hands-on technical contributor who reviews, evaluates, and validates AI initiatives across CNA. The role conducts architecture and design reviews of AI, machine learning, generative AI, large language model, and agentic solutions; develops evaluation criteria for RFIs and RFPs; and tests candidate solutions against security requirements. As the AI Security team’s representative in the AI Governance review process, the role provides technical security perspectives on AI threats and risks, while governance, risk, and compliance functions remain with dedicated teams.

The specialist identifies risks in AI systems and data pipelines, recommends practical controls and remediations, and partners with AI Security, Engineering, Cloud Security, Application Security, IAM, Data Security, and AI Governance. The role also contributes to security standards and reference architectures, supports security controls in software development and deployment workflows, and tracks emerging AI threats and defensive practices.

The position typically reports to a Director or above. A bachelor’s degree is required, along with at least five years of information security experience, including exposure to cloud and AI/ML environments. The listed base pay range in specified jurisdictions is $97,000 to $189,000 annually. CNA offers a comprehensive benefits package.

Requirements

• Bachelor’s degree required.
• At least 5 years of information security experience, including exposure to cloud and AI/ML environments.
• Hands-on experience with public cloud security, including AWS and Google Cloud.
• Strong working knowledge of AI/ML, GenAI, and LLM security concepts and common attack and defense techniques.
• Hands-on experience with security architecture and design reviews.
• Solid understanding of cloud security and secure cloud configurations.
• Familiarity with DevSecOps practices and secure software development.
• Ability to design and execute solution testing, proofs of concept, and technical validations.
• Ability to write clear evaluation criteria, technical assessments, and review documentation.
• Ability to translate technical risk into actionable recommendations.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently and manage multiple concurrent reviews.

Nice To Haves

• A degree in a relevant technical discipline.
• Certifications such as CISSP, CCSP, GIAC, or AI/cloud security credentials.
• Insurance or financial services experience.

Responsibilities

• Serve as the AI Security team’s technical reviewer in the AI Governance review process, providing a security perspective on AI threats and risks.
• Conduct architecture and design reviews of AI/ML, GenAI, LLM, and agentic initiatives, documenting findings, risks, and recommended controls.
• Write and maintain technology evaluation criteria for RFIs and RFPs covering AI security tooling and solutions.
• Test, validate, and benchmark candidate AI security solutions through proofs of concept and hands-on assessments.
• Perform threat modeling and security risk assessments of AI systems, models, and data pipelines.
• Evaluate AI workload security across cloud environments, including AWS and Google Cloud, and recommend secure configurations.
• Apply industry standards and frameworks such as NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS to reviews and assessments.
• Contribute to AI security standards, reference architectures, and best-practice guidance.
• Support integration of AI security controls into SDLC, CI/CD, and DevSecOps workflows.
• Assist with vulnerability management, security monitoring, and incident readiness for AI systems.
• Provide technical security input to Risk, Legal, and AI Governance teams supporting compliance and regulatory work.
• Track emerging AI threats, attack techniques, and defensive practices.

Benefits

• A comprehensive and competitive benefits package intended to support employees’ and their family members’ physical, financial, emotional, and social wellbeing.

What This Job Offers

• Job Type: Full-time
• Career Level: Director