Manager, AI Assurance & Governance, Cyber Advisory

Kroll • United States,

4d • $150,000 - $175,000 • Remote

About The Position

In a world of disruption and increasingly complex business challenges, our professionals bring truth into focus with the Kroll Lens. Our sharp analytical skills, paired with the latest technology, allow us to give our clients clarity—not just answers—in all areas of business. We value the diverse backgrounds and perspectives that enable us to think globally. As part of One team, One Kroll, you’ll contribute to a supportive and collaborative work environment that empowers you to excel. Through a combination of subject matter expertise, global research capabilities and flexible technology tools, Kroll helps clients take a risk-based approach toward meeting obligations or remediating failures regarding cybersecurity, privacy program maturity and related regulatory mandates. Our engagements include Virtual CISO, regulatory and compliance assessments, strategies, AI Governance and security program design, transactional due-diligence, data-driven framework design and assessments, expert testimony, privacy program building and a myriad of other advisory efforts. Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our client’s data, people, operations and reputation with innovative assessments, investigations and intelligence. We are the only company in the world with the expertise and resources to deliver global, end-to-end cyber risk management, supporting organizations through every step of their journey toward cyber resilience. We are looking for bright, inquisitive minds who are experienced in and passionate about Artificial Intelligence/Machine Learning and its place within cybersecurity consulting and advisory services. Our Advisory team responds to our clients’ needs and provide leadership and strategic guidance when and where it is needed the most.

Requirements

• Excellent interpersonal skills, drive, enthusiasm, and a passion for security.
• Strong knowledge of AI governance, risk and security frameworks and standards including NIST AI RMF, ISO/IEC 42001, OWASP Top 10 for LLM Applications, and the OWASP GenAI Security Project, CSA AI Security Maturity Model , CSA AI Controls Matrix, MITRE ATLAS, OECD AI Principles and emerging AI regulatory requirements such as the EU AI Act and US regulatory guidance
• Experience conducting AI risk assessments, AI control reviews, model governance assessments, or AI compliance evaluations across enterprise environments.
• Strong understanding of Responsible AI principles, including transparency, explainability, human oversight, accountability, fairness, and model governance.
• Experience advising executive leadership, risk committees, governance boards, or regulators on AI-related risks, controls, and adoption strategies.
• Knowledge of enterprise AI technologies including Generative AI, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI Agents, and autonomous systems.
• Experience developing AI policies, standards, governance procedures, operating models, and risk management frameworks.
• Understanding of core security controls, e.g. network security, IAM, cryptography, SSDLC, cloud security, security testing, etc.
• Technical acumen in tools such as Excel, Tableau, Power BI, and/or SQL, to empower teams to extract actionable insights and drive informed decision-making
• Good knowledge of the security and AI threat landscape, control frameworks and cyber resilience strategies.
• Enjoys solving problems and designing solutions/capabilities leveraging people, processes and technologies.
• Strong written and verbal communication and presentation skills, teamwork, and client relationship skills.
• Experience in high-quality delivery to tight timescales.
• A critical thinker and problem solver with attention to detail and adaptability.
• Outstanding organizational skills. Ability to multi-task, prioritize, and manage time effectively.
• Experience working with diverse teams

Nice To Haves

• Experience with Microsoft Copilot, Azure AI Foundary, OpenAI, Anthropic Claude, AWS Bedrock, Google Gemini, Databricks, or similar enterprise AI platforms.
• Experience evaluating third-party AI solutions, AI vendor risk, model risk management, or AI procurement governance.
• Familiarity with AI governance and assurance platforms e.g. Credo AI, Holistic AI, ModelOp, IBM watsonx Governance, or equivalent technologies.
• Industry experience supporting financial services, healthcare, technology, energy, public sector, or other regulated industries.
• Relevant certifications such as CISSP, CISM, CRISC, ISO 42001 Lead Implementer/Auditor, CGRC, PMP, or equivalent professional qualifications.

Responsibilities

• Support the delivery of high-quality cybersecurity consulting advice and services to a portfolio of clients of varying size, scope, and complexity.
• Design and implement enterprise AI Governance programs, operating models, policies, standards and controls, including processes for Agentic AI, GenAI, ML and autonomous decision-making solutions.
• Contribute to building and enhancing AI capabilities, service delivery collaboration, methodology development and AI Risk / Security knowledge base.
• Conduct AI Risk Assessments across internally developed, procured and third-party AI systems.
• Advise clients on establishing AI governance committees, decision-making structures and accountability frameworks.
• Support development of AI inventories, use-case classification methodologies and risk tiering approaches.
• Assess client readiness against frameworks such as NIST AI RMF, EU AI Act, ISO 42001, OECD AI Principles and emerging regulatory requirements.
• Support organizations in implementing practical guardrails around AI adoption balancing innovation, risk management and regulatory compliance.
• Perform AI Assurance reviews to evaluate effectiveness of AI governance, controls, security and oversight mechanisms.
• Conduct AI Security and Assurance assessments including model security reviews, adversarial testing, LLM security assessments and evaluation of AI control effectiveness.
• Collaborate with offensive security and engineering teams to validate AI security controls through targeted testing and technical assessments of AI systems against emerging threats including prompt injection, model manipulation, training data poisoning, insecure plugins, excessive agency, data leakage and supply-chain compromise.
• Support AI-related elements of services including Secure Model Development, Data Security, Application Development, Third Party and Supply Chain Security, and Security Testing.
• Work closely with clients’ governance, security and IT teams to understand their requirements and guide implementation of technologies and processes.
• Research advances in AI/ML development, such as Agentic AI, Multimodal AI, Reasoning Models, AI Security and Governance, AI in Software Engineering, the AI regulatory landscape (EU AI Act, US SEC AI Compliance Plan, etc.) and AI/ML governance and security frameworks (ISO/IEC42001, NIST AI RMF, OWASP Top 10 for LLM Applications, OECD AI Principles, etc.).
• Continually monitor changes and developments across global and regional tech and cyber regulation and legislation, as well as the wider cyber threat landscape to ensure services and clients are kept abreast of the ever-evolving threats, new controls, and requirements.
• Review and uplift of relevant frameworks, policies and procedures and provide practical advice to support the operation of new processes.
• Effectively communicate findings, reports, training and strategies to technical staff, executive leadership, legal counsel, and to both internal and external clients.
• Support the development of proposals and statements of work for Kroll clients.
• Work with sales and marketing teams to support the development of new business opportunities.

Benefits

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.
• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.
• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.
• Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.
• Retirement Plans: 401(k) plans with company matching.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed