Cyber - AI Security - Senior - Consulting

EY•Hartford, DC

6d•$104,800 - $218,500•Remote

About The Position

Artificial Intelligence (AI) is rapidly transforming how organizations operate, and with that transformation comes an entirely new frontier of security, governance, and risk management challenges. Organizations are grappling with securing AI pipelines, managing model-level risks, operationalizing AI governance programs, and navigating an evolving regulatory landscape specific to AI technologies. As a Senior Consultant within EY’s Cyber practice focused on AI Security, you will work with clients to assess AI risk postures, architect AI security controls, and develop governance frameworks that enable organizations to adopt and scale AI responsibly and securely. This role offers the opportunity to combine hands-on technical implementation work with strategic advisory and architecture engagements across diverse industries.

Requirements

A bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience, including at least 1–2 years in AI or machine learning security; or a graduate degree and 2–4 years of relevant experience.
Experience in one or more of the following areas: AI security assessments, AI-SPM, or AI model risk evaluations; AI/ML pipeline security, model security, and MLOps security practices; AI governance, responsible AI policy development, and AI risk management frameworks; DevSecOps and CI/CD security, including hands-on experience with platforms and harnesses; Cloud security with specific experience securing AI workloads on platforms such as AWS, Azure, or GCP; AI regulatory compliance and emerging AI-specific standards and guidance; Cybersecurity architecture, risk management, and security controls design.
Familiarity with AI security frameworks and guidance, including NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS.
Working knowledge of foundational cybersecurity frameworks—including NIST CSF, NIST 800-53, and ISO 27001/27002—as applied within AI-enabled environments.
Strong Microsoft PowerPoint, Excel, and Word skills.
Willingness to travel based on client and business needs; travel estimated at 25–50%.

Nice To Haves

Professional certifications in cybersecurity (e.g., CISSP, CCSP, CISM) or emerging AI/ML security credentials.
Hands-on experience with AI-SPM platforms, MLOps tooling, and AI security automation technologies.
Experience with CI/CD orchestration and integrated security tooling, including harnesses, to enforce automated security gates within AI development pipelines.
Knowledge of adversarial machine learning techniques, model explainability requirements, and AI supply chain risk management.
Exposure to AI-related regulatory developments, including the EU AI Act, NIST AI RMF, and sector-specific AI guidance applicable to financial services, healthcare, or critical infrastructure.
Experience facilitating client workshops, technical design sessions, and AI security architecture reviews.
Background in software development, data engineering, or ML engineering that informs deep technical AI security expertise.
Experience within a consulting, professional services, or advisory environment.

Responsibilities

Conduct AI security assessments, evaluate AI/ML pipelines and model infrastructure, identify vulnerabilities inherent to AI systems, and develop practical, prioritized remediation strategies.
Architect and support the implementation of AI-SPM solutions, configure AI security tooling—including platforms and harnesses—and help clients operationalize continuous monitoring and governance controls across their AI workloads.
Develop AI governance frameworks, policies, and standards aligned to emerging regulatory requirements and industry guidance.
Assist clients in designing AI risk management programs, performing AI model risk assessments, and building AI security roadmaps that balance innovation with responsible AI principles.
Prepare client deliverables, technical architecture documentation, and executive-level presentations that communicate complex AI security concepts to both technical and non-technical audiences.
Collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY’s growing AI security capability.