Director, AI Security

Omnicell•Grapevine, TX

11d•$165,820 - $236,886

About The Position

Omnicell is seeking a Director, AI Security, to establish and lead the security capabilities that enable responsible AI adoption across the enterprise. The role defines strategy, architecture, governance, and operational controls to secure machine learning, generative AI, LLMs, AI agents, copilots, and autonomous systems throughout their lifecycles, protecting sensitive data, customers, patients, and the business while enabling AI at scale. This role owns the security architecture and control environment for AI systems as enterprise platforms and AI agents as autonomous identities that access data, invoke tools, and act on the organization’s behalf. It is not solely an AI governance or compliance role. The Director will lead the function’s strategy, operating model, governance, roadmap, performance, resources, and capabilities, and will extend enterprise security architecture and standards to AI technologies. The position also partners with product and technology teams to secure AI-enabled and connected systems, including Omnicell pharmacy automation. It leads AI security risk oversight and compliance activities, aligning security, privacy, regulatory, and industry frameworks. Success includes establishing enterprise AI security strategy and governance; AI and agent inventory and identity standards; reference architectures, threat modeling, red teaming, vendor and model assessment, and AI detection and response; a joint operating model with Product Security; and cyber-physical security controls for AI embedded in or interfacing with connected devices.

Requirements

15+ years of progressive experience in cybersecurity, security architecture, engineering, or technology risk.
5+ years leading enterprise security architecture, engineering, product, cloud, application, or AI security capabilities.
Experience operating within a formal enterprise security architecture practice, including ARB participation and reference architecture ownership; SABSA, TOGAF, or equivalent.
Experience designing controls spanning identity, network, data, and application layers across hybrid and multi-cloud estates.
Strong knowledge of GenAI, LLMs, agentic AI, RAG, and vector databases, with the ability to translate AI risk into practical architecture and technical controls.
Deep understanding of IAM, privileged access, Zero Trust, cloud, application/API security, threat modeling, and security operations.
Experience in healthcare, medical device, or another highly regulated environment.
Strong executive communication and cross-functional influence.
Experience with OT, ICS, IoMT, or connected medical device environments, or close partnership with product security in a device manufacturer, healthcare delivery, or comparable cyber-physical context.
Working knowledge of IEC 62443, NIST SP 800-82, FDA premarket/postmarket cybersecurity guidance, and clinical network segmentation practices.

Nice To Haves

Bachelor’s or master’s degree in a related field, or equivalent practical experience.
CISSP, CCSP, CISM, SABSA, TOGAF, cloud security certifications, IAPP AIGP, or GICSP (OT) certification.
Experience securing production enterprise platforms and AI technologies, including OI/IoMT, Azure, OpenAI, Copilot, Bedrock, Vertex AI, Anthropic, Databricks, LangChain, and MCP.
Experience with AI security capabilities such as gateways, posture management, red teaming, model scanning, and non-human identity.
Experience securing OT, ICS, IoMT, or connected medical device environments, including IEC 62443, NIST SP 800-82, FDA cybersecurity guidance, and clinical network segmentation.
Familiarity with OWASP LLM guidance and MITRE ATLAS.
Experience building AI inventories, agent registries, or AI incident-response programs.

Responsibilities

Define and lead the enterprise AI security strategy, operating model, governance, and roadmap; oversee the function’s performance, resources, and capabilities.
Extend and align enterprise security architecture and standards to AI technologies, ensuring appropriate controls, risk management, and integration with broader security frameworks.
Establish and manage AI security controls, architectures, and operational practices across AI platforms, applications, agents, and supporting technologies, ensuring secure development, deployment, and monitoring.
Partner with product and technology teams to secure AI-enabled and connected systems, applying appropriate safeguards, risk management practices, and regulatory considerations.
Lead AI security governance, risk oversight, and compliance activities, ensuring alignment with applicable security, privacy, regulatory, and industry frameworks.
Establish AI and AI-agent inventory, an agent identity and authorization standard, and secure GenAI/RAG and MCP/tool reference architecture integrated with the ARB.
Establish AI threat-modeling methodology, a red-team program, vendor/model assessment processes, and AI Detection & Response capability with incident-response playbooks.
Establish a joint operating model with Product Security for AI touching connected devices and put executive metrics and risk reporting in place.
Extend enterprise security reference architecture to AI platforms, agents, and model services, including identity fabric, Zero Trust segmentation, dataflow, and trust-boundary standards, integrated with the ARB and enterprise risk register.
Establish CPS and connected-device security controls for AI embedded in or interfacing with Omnicell pharmacy automation, including IEC 62443/Purdue-aligned segmentation and fail-safe/human-approval requirements for device- and medication-affecting decisions.
Measure success through AI-system and agent inventory and pre-production review coverage, red-team coverage, remediation and detection/containment times, and reduction of unauthorized AI use.
Collaborate across Security, Engineering, Data, Privacy, Legal, and Quality/Regulatory; develop talent and organizational capability; and enable secure, responsible AI adoption.