AI Security Governance and Risk Analyst - TS/SCI and Polygraph

General Dynamics Information Technology•Bethesda, MD

3d•$186,542 - $252,379•Onsite

About The Position

Develop AI system categorization and authorization boundary doctrine to support Authorizing Official (AO) risk decisions. Establish evidence standards for AI system assessments that distinguish demonstrated, testable control performance from vendor or developer attestation. Maintain AI governance frameworks against evolving federal AI policy, CNSS guidance, and NIST standards, updating assessment criteria as requirements change. Map federal AI policy requirements to NIST SP 800-53 controls and Zero Trust capability outcomes to produce actionable assessment criteria. Define continuous monitoring requirements to detect and assess unauthorized or undocumented changes to deployed AI models. Integrate adversarial threat considerations into AI assessment frameworks and evidence requirements. Lead or coordinate cross-team working groups to drive consistent application of AI assessment frameworks across the assessment organization. Coordinate with assessment teams to ensure consistent framework application and resolve interpretation gaps across concurrent AI assessments. Prepare and deliver stakeholder briefings, consultations, and training on AI governance requirements and assessment methodology. Provide advisory support to Authorizing Officials on AI system authorization decisions, risk posture, and residual risk acceptance.

Requirements

Bachelor’s degree in computer engineering, Computer Science, Electrical Engineering, Information systems, Information Technology, Cybersecurity, or a closely related discipline
7+ years of related experience
TS/SCI with Polygraph security clearance
US citizenship required

Nice To Haves

Meets DoD 8570.01-M baseline certification requirement for Information Assurance Manager (IAM) Level III: CISSP (or Associate), CISM, or GSLC.
AI governance certification (e.g., ISACA AAISM, IAPP AIGP, CompTIA SecAI+) a plus
Experience translating policy or regulatory requirements into technical assessment criteria.
Strong writing skills, with experience producing governance frameworks, standards documents, or policy-to-practice mapping products.
Knowledge of NIST SP 800-53, Risk Management Framework, and AI risk management practices (e.g., NIST AI RMF).
Experience with IC or federal AI governance policy and directives.
A Master’s degree in an applicable discipline be substituted for three years of demonstrated work experience

Responsibilities

Develop AI system categorization and authorization boundary doctrine to support Authorizing Official (AO) risk decisions.
Establish evidence standards for AI system assessments that distinguish demonstrated, testable control performance from vendor or developer attestation.
Maintain AI governance frameworks against evolving federal AI policy, CNSS guidance, and NIST standards, updating assessment criteria as requirements change.
Map federal AI policy requirements to NIST SP 800-53 controls and Zero Trust capability outcomes to produce actionable assessment criteria.
Define continuous monitoring requirements to detect and assess unauthorized or undocumented changes to deployed AI models.
Integrate adversarial threat considerations into AI assessment frameworks and evidence requirements.
Lead or coordinate cross-team working groups to drive consistent application of AI assessment frameworks across the assessment organization.
Coordinate with assessment teams to ensure consistent framework application and resolve interpretation gaps across concurrent AI assessments.
Prepare and deliver stakeholder briefings, consultations, and training on AI governance requirements and assessment methodology.
Provide advisory support to Authorizing Officials on AI system authorization decisions, risk posture, and residual risk acceptance.