Consulting Director – AI Security

Consulting Director – AI Security

Requirements

• Expert level knowledge of AI, GenAI, LLMs, ML, and related concepts and practices, ideally demonstrating some hands-on knowledge of AI model creation, and LLM training experience.
• Deeply familiar with Security Architecture, and the application of security best practices to various Cloud delivery models in Multi-Cloud environments.
• Strong familiarity with Cloud platforms, especially Google Cloud Platform (GCP).
• Experience with DevSecOps and Agile Methodologies along with experience with third party Cloud security tools, and Cloud Native services and their associated security implications.
• Ability to assess risks in line with information security objectives and risk tolerance of the institution. Proven conceptual, analytical and evaluation skills.
• Strong interpersonal, written and verbal communication skills, with ability to present to Executive leadership audience.
• Self-starter and the ability to work independently.
• Ability to work well under pressure and tight deadlines. Demonstrate a high level of motivation, confidence, responsibility and ownership.
• Strong project management skills and ability to organize and plan team’s effort effectively to meet project goals.
• Bachelor’s Degree required. Master’s Degree or equivalent experience in Computer Science or related technical field preferred.
• Typically, a minimum of ten years of IT Security experience, with recent experience in AI/ML.
• Strong knowledge and experience architecting security solutions within public cloud providers – Google Cloud preferred.

Responsibilities

• Define and maintain CNA’s enterprise-wide AI, ML, and LLM security standards, policies, and technical specifications.
• Serve as a key contributor to the AI Governance Committee, ensuring the responsible, ethical and secure use of AI across CNA.
• Stay informed of emerging threats, regulatory changes, and industry best practices pertaining to AI; lead internal efforts to adopt innovative and secure AI methodologies.
• Develop and continuously improve the process for assessing, testing, and performing security reviews of AI technology before it’s moved for Governance committee approval.
• Develop and continuously improve threat models for AI/ML workloads, particularly within cloud-native services.
• Lead the discovery, risk assessment, and remediation of Shadow AI across business units.
• Identify and quantify AI security technical debt, based on violations of CNA’s standards, policies, and technical requirements.
• Oversee the development of key security posture metrics, dashboards, and reporting frameworks related to AI/ML systems.
• Partner with Cloud Security Automation, Application Security, and Data Security teams to ensure that all AI initiatives are aligned with CNA’s broader security objectives.
• Ensure secure handling of CNA’s most sensitive data throughout the AI model lifecycle, while enabling agility and scalability for innovation teams.
• Contribute to infrastructure and application security initiatives with a specific focus on securing AI/ML use cases at scale.
• Lead research and development of new AI security tools and techniques, evaluating their applicability to CNA’s environment and operationalizing where appropriate.

Preferred Qualifications

• IT Security and Cloud certifications preferred (e.g. CISSP, CCSP, CCSK, etc).
• Knowledge and familiarity with the insurance industry is a plus.