Principal AI Security Strategist - WFH

Health Care Service Corporation•Chicago, IL

1d•$146,700 - $272,400•Remote

About The Position

This position is responsible for defining, advancing, and governing the enterprise AI Security strategy, architecture, and risk management program to enable the secure adoption and use of artificial intelligence technologies across the organization. The role will develop security standards, reference architectures, control frameworks, and governance practices that address current and emerging risks associated with generative AI, machine learning, autonomous agents, model development, and third-party AI services. Serving as the organization's senior AI security subject matter expert, this position partners closely with enterprise architecture, security engineering, data, legal, compliance, privacy, and business leaders to ensure AI solutions are developed, procured, and operated in a secure, compliant, and responsible manner. The role provides strategic guidance and architectural leadership to influence enterprise technology decisions and establish security requirements for AI platforms, models, and business use cases.

Requirements

Bachelor's Degree and 12 years of experience in information security, cybersecurity architecture, technology risk, or related disciplines.
Expertise in AI security, cloud security, application security, data security, and emerging technology risk management.
Experience developing AI security strategies, governance frameworks, standards, risk assessments, and control requirements for enterprise AI and machine learning deployments.
Deep understanding of artificial intelligence, machine learning, generative AI, large language models (LLMs), autonomous agents, and AI platform security.
Experience designing security architectures, governance frameworks, and risk controls for AI platforms, machine learning environments, cloud services, data platforms, and enterprise applications.
Deep understanding of AI-specific security threats and controls, including prompt injection, model poisoning, model theft, excessive agency, insecure output handling, data leakage, and third-party AI risk management.
Understanding of enterprise risk management principles and processes, including the assessment and mitigation of risks associated with AI adoption and emerging technologies.
Understanding of enterprise technologies, operations, and architectural principles, including cloud services, data platforms, APIs, application development, and modern technology ecosystems supporting AI-enabled business capabilities.
Experience with requirements analysis and the development of use cases, security architectures, reference models, architectural principles, standards, and design patterns.
Experience developing AI governance standards, security review processes, security architecture requirements, and risk management frameworks supporting responsible and secure AI adoption.
Knowledge of applicable laws, regulations, industry standards, and emerging regulatory requirements related to artificial intelligence, data protection, privacy, and healthcare.
Written and verbal communication skills with the ability to effectively present complex AI security, technology risk, and governance concepts to executive, business, legal, and technical audiences.

Nice To Haves

Master's Degree in Cybersecurity, Computer Science, Artificial Intelligence, Data Science, or a related field.
Industry certifications such as CISSP, CISM, CCSP, SABSA, or equivalent security architecture certifications.
Experience establishing or leading an enterprise AI Security program, AI governance function, or responsible AI initiative.
Experience with NIST AI Risk Management Framework (AI RMF), OWASP Top 10 for LLM Applications, AI governance frameworks, and secure AI development practices.
Experience evaluating and securing commercial AI platforms, AI-enabled applications, and third-party AI service providers.
Experience within a highly regulated industry such as healthcare, financial services, or critical infrastructure.
Recognized thought leadership in AI security through speaking engagements, publications, industry participation, standards development, or community contributions.

Responsibilities

Defining, advancing, and governing the enterprise AI Security strategy, architecture, and risk management program.
Developing security standards, reference architectures, control frameworks, and governance practices for AI technologies.
Addressing current and emerging risks associated with generative AI, machine learning, autonomous agents, model development, and third-party AI services.
Partnering with enterprise architecture, security engineering, data, legal, compliance, privacy, and business leaders to ensure secure, compliant, and responsible AI solutions.
Providing strategic guidance and architectural leadership to influence enterprise technology decisions.
Establishing security requirements for AI platforms, models, and business use cases.