AI Risk, Compliance & Security Architect

10+ years in enterprise IT risk, security, or compliance with at least 3 years focused on AI governance, AI risk management or responsible AI frameworks Deep familiarity with NIST AI RMF , ISO/IEC 42001 , HIPAA Security Rule , and emerging AI-specific regulatory guidance Hands-on experience assessing enterprise AI environments spanning hyperscalers (Azure, AWS, GCP), SaaS platforms, and self-hosted/on-prem models Working knowledge of security tooling relevant to AI governance: CASB, DLP, SIEM, ITSM, Zero Trust, TPRM Understanding of agentic AI, LLM deployment patterns, and Model Context Protocol (MCP) security considerations — a strong differentiator Proven ability to translate technical findings into executive-level narratives, architecture recommendations, and prioritized roadmaps Prior consulting or professional services experience; comfort managing client relationships and driving deliverables in a fixed-scope, milestone-based engagement Healthcare or life sciences vertical experience strongly preferred Familiarity with AIBOM (AI Bill of Materials), AIVSS (AI Vulnerability Scoring), or similar emerging AI risk frameworks Working knowledge of AI/LLM security — prompt injection (direct/indirect), jailbreaking, model extraction concepts, and unsafe-output detection. Familiarity with agentic AI security: multi-agent/cascade risks, tool & plugin exploitation, human-in-the-loop override controls, and RAG / persistent-memory poisoning. Understanding of AI security posture management and discovery concepts across cloud AI platforms (e.g., Azure AI Foundry, AWS Bedrock, Databricks, Vertex AI). Solid grasp of security frameworks and responsible-testing practices (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF advantageous). Strong client-facing communication — able to run scoping calls, manage a customer relationship, and present findings to mixed audiences. Experience with ServiceNow, Varonis, Purview, CrowdStrike, or Palo Alto in an AI governance integration context CISSP, CISM, CISA, or equivalent certification