AI Security Risk Assessor

TEKsystems•Berwyn, IL

5d•$75 - $100•Remote

About The Position

We are seeking a Senior AI Security Risk Assessment Consultant to help establish and operationalize our client's organization's enterprise AI Security Risk Assessment Methodology. This role will lead execution of AI security risk assessments across AI technologies, business use cases, and third-party AI providers while helping mature overall AI governance capabilities. The consultant will support the development of repeatable AI security assessment processes aligned to the NIST AI Risk Management Framework (AI RMF) and existing cybersecurity risk management practices.

Requirements

7+ years of experience in Cybersecurity, Information Security, Technology Risk, or Cyber Risk Management.
Experience performing security risk assessments and control evaluations.
Knowledge of Generative AI, LLMs, AI agents, and emerging AI security risks.
Experience working within regulated environments.
Strong communication and stakeholder management skills.

Nice To Haves

Insurance or Financial Services experience.
Experience with: NIST AI RMF, NIST Cybersecurity Framework, MITRE ATLAS, AI Threat Modeling, AI Red Teaming, Third-Party Risk Management
Certifications: CISSP, CRISC, CGRC, CISA, AIGP

Responsibilities

Conduct security-focused AI risk assessments for enterprise AI initiatives.
Develop and operationalize the client' AI Security Risk Assessment Methodology.
Evaluate risks associated with: Generative AI platforms, Large Language Models (LLMs), AI Agents, Third-Party AI Providers, Open Source Models, Model Supply Chains
Assess threats including: Prompt Injection, Data Leakage, Model Poisoning, Training Data Exposure, Unauthorized Data Access, Insecure AI Integrations, AI-Enabled Cyber Threats
Define AI risk scoring criteria and evaluation standards.
Facilitate AI security review workshops with Security, Architecture, Legal, Compliance, Privacy, and Technology partners.
Support AI-related Cyber Risk Quantification (CRQ) efforts.
Produce findings, executive summaries, mitigation recommendations, and remediation requirements.
Align AI risk assessments with the client's cybersecurity governance framework and existing risk management processes.