The posting
Job Title: Security Gen AI Security and NIST Framework Consultant Job Description: Security Consultant responsible for leading AI/GenAI security assessments, governance reviews, risk evaluations, and compliance initiatives while establishing secure AI adoption practices aligned with NIST AI RMF, ISO 42001, and enterprise security standards. Location: Toronto, ON - Hybrid (2-3 Days WFO) Contract Duration: 6-12 Month Contract
Key Responsibilities
- Lead end-to-end AI Security Assessment engagements, including planning, execution, reporting, and stakeholder management.
- Conduct AI and Generative AI security, governance, risk, and compliance assessments.
- Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
- Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
- Perform AI threat modeling and identify risks such as:Prompt Injection Data Leakage Model Abuse Supply Chain Vulnerabilities
- Evaluate controls against:NIST AI Risk Management Framework (AI RMF) ISO 42001 OWASP LLM Top 10 Enterprise Security Standards
- Develop gap assessments, risk ratings, maturity assessments, and remediation roadmaps.
- Create executive-level reports, presentation materials, and security recommendations.
- Provide strategic guidance for secure AI adoption, governance, and operationalization.
- Manage project governance, timelines, risks, issues, and stakeholder communications.
- Support AI security program development and responsible AI initiatives.
Core Qualifications
- 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
- Proven experience leading enterprise security assessments and advisory engagements.
- Strong expertise in:AI Security Generative AI Security AI Governance Responsible AI AI Risk Management
- Deep understanding of:Large Language Models (LLMs) AI/ML Security Prompt Security Model Security
- Experience with:NIST AI RMF MITRE ATLAS AI Threat Modeling Security Risk Assessments
- Experience assessing cloud-based AI services and AI-enabled applications.
- Strong knowledge of Microsoft Copilot and Azure OpenAI security controls.
- Experience with security compliance, governance, and regulatory frameworks.
- Strong stakeholder management, workshop facilitation, and consulting skills.
- Excellent executive communication and presentation skills.
Preferred Qualifications
- Experience implementing AI governance frameworks within large enterprises.
- Experience supporting Microsoft Copilot, Azure OpenAI, or enterprise GenAI initiatives.
- Knowledge of ISO 42001 and emerging AI regulations.
- Experience working with cloud security architectures across Azure, AWS, and GCP.
- Experience building AI security roadmaps and maturity improvement programs.
- Relevant cybersecurity certifications such as CISSP, CCSP, CISM, or equivalent.
Key Skills
- Artificial Intelligence (AI)
- Generative AI
- AI Security
- GenAI Security
- Large Language Models (LLMs)
- AI Governance
- Responsible AI
- NIST AI RMF
- ISO 42001
- MITRE ATLAS
- OWASP LLM Top 10
- Threat Modeling
- Microsoft Copilot Security
- Azure OpenAI
- Cloud Security
- Risk Management
- Security Assessments
- Compliance
- Cybersecurity
- Stakeholder Management
- Security Consulting
- Executive Reporting



