Security Gen AI Security and NIST Framework Consultant

3 days ago

Toronto, Ontario, Canada Q1 Technologies, Inc. Full-time

Security Gen AI Security and NIST Framework Consultant

Toronto, ON - Hybrid (2-3 Days WFO)

6-12 months

Experience Required: 10 & Above

Role Descriptions: Key Responsibilities

  • Lead end-to-end AI Security Assessment engagements| including planning| execution| reporting| and stakeholder management.
  • Conduct AI/GenAI security| governance| risk| and compliance assessments.
  • Facilitate discovery workshops and interviews with security| technology| data| risk| and business stakeholders.
  • Assess AI platforms| LLM applications| model lifecycle controls| and supporting cloud infrastructure.
  • Perform AI threat modeling and identify risks such as prompt injection| data leakage| model abuse| and supply chain vulnerabilities.
  • Evaluate controls against NIST AI RMF| ISO 42001| OWASP LLM Top 10| and organizational security requirements.
  • Develop gap analyses| risk ratings| remediation recommendations| and maturity assessments.
  • Create executive-ready assessment reports| roadmaps| and presentation materials.
  • Provide strategic guidance on secure AI adoption| governance| and operationalization.
  • Manage project governance| timelines| risks| issues| and customer communications.

Technical SkillsAI Security and Generative AI Security

Large Language Models (LLMs) and AI/ML SecurityAI Governance and Responsible AINIST AI RMF| MITRE ATLAS and AI Threat Modeling Microsoft Copilot and Azure OpenAI Security, Security Compliance and Regulatory Frameworks

Stakeholder Management and Workshop Facilitation

Experience

  • 10+ years in Cybersecurity delivery.
  • Experience leading enterprise security assessments and advisory engagements.
  • Hands-on experience with AI/GenAI| cloud security| and governance frameworks.
  • Strong executive communication and client-facing consulting skills.
  • Lead end-to‑end AI Security Assessment engagements| including planning| execution| reporting| and stakeholder management.
  • Conduct AI/GenAI security| governance| risk| and compliance assessments.
  • Facilitate discovery workshops and interviews with security| technology| data| risk| and business stakeholders.
  • Assess AI platforms| LLM applications| model lifecycle controls| and supporting cloud infrastructure.
  • Perform AI threat modeling and identify risks such as prompt injection| data leakage| model abuse| and supply chain vulnerabilities.
  • Evaluate controls against NIST AI RMF| ISO 42001| OWASP LLM Top 10| and organizational security requirements.
  • Develop gap analyses| risk ratings| remediation recommendations| and maturity assessments.
  • Create executive‑ready assessment reports| roadmaps| and presentation materials.
  • Provide strategic guidance on secure AI adoption| governance| and operationalization.
  • Manage project governance| timelines| risks| issues| and customer communications.

Technical Skills

AI Security and Generative AI Security Large Language Models (LLMs) and AI/ML SecurityAI Governance and Responsible AINIST AI RMF| MITRE ATLAS and AI Threat Modeling, Microsoft Copilot and Azure OpenAI Security, Security Compliance and Regulatory Frameworks.

Stakeholder Management and Workshop FacilitationExperience8+ years in Cybersecurity delivery.

  • Experience leading enterprise security assessments and advisory engagements.
  • Hands-on experience with AI/GenAI| cloud security| and governance frameworks.
  • Strong executive communication and client‑facing consulting skills.