Security Gen AI Security and NIST Framework Consultant

Q1 Technologies, Inc.; Toronto; Hybrid; CAD 140,000 - 210,000; Full time

Job summary

Q1 Technologies, Inc. in Toronto (Hybrid: 2-3 days WFO) seeks a Security Gen AI Security and NIST Framework Consultant to lead end-to-end AI security assessments and governance engagements.

The role requires strong client-facing consulting skills and experience with AI/GenAI, cloud security, and risk management. Ideal candidates have 10+ years in cybersecurity delivery, executive communication strength, and hands-on experience with AI platforms, security controls, and regulatory frameworks such

Qualifications

• 10+ years in cybersecurity delivery.
• Experience leading enterprise security assessments and advisory engagements.
• Hands-on experience with AI/GenAI, cloud security, and governance frameworks.
• Strong executive communication and client-facing consulting skills.

Responsibilities

• Lead end-to-end AI Security Assessment engagements, including planning, execution, reporting, and stakeholder management.
• Conduct AI/GenAI security, governance, risk, and compliance assessments.
• Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
• Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
• Develop gap analyses, risk ratings, remediation recommendations, and maturity assessments.
• Create executive-ready assessment reports, roadmaps, and presentation materials.

Skills

AI Security

GenAI Security

LLMs

AI Governance

NIST AI RMF

Cloud Security

Executive Communication

Tools

Microsoft Copilot

Azure OpenAI

MITRE ATLAS

Job description

Security Gen AI Security and NIST Framework Consultant

Toronto, ON - Hybrid (2-3 Days WFO)

6-12 months

Experience Required: 10 & Above

Role Descriptions: Key Responsibilities

• Lead end-to-end AI Security Assessment engagements| including planning| execution| reporting| and stakeholder management.
• Conduct AI/GenAI security| governance| risk| and compliance assessments.
• Facilitate discovery workshops and interviews with security| technology| data| risk| and business stakeholders.
• Assess AI platforms| LLM applications| model lifecycle controls| and supporting cloud infrastructure.
• Perform AI threat modeling and identify risks such as prompt injection| data leakage| model abuse| and supply chain vulnerabilities.
• Evaluate controls against NIST AI RMF| ISO 42001| OWASP LLM Top 10| and organizational security requirements.
• Develop gap analyses| risk ratings| remediation recommendations| and maturity assessments.
• Create executive-ready assessment reports| roadmaps| and presentation materials.
• Provide strategic guidance on secure AI adoption| governance| and operationalization.
• Manage project governance| timelines| risks| issues| and customer communications.

Technical SkillsAI Security and Generative AI Security

Large Language Models (LLMs) and AI/ML SecurityAI Governance and Responsible AINIST AI RMF| MITRE ATLAS and AI Threat Modeling Microsoft Copilot and Azure OpenAI Security, Security Compliance and Regulatory Frameworks

Stakeholder Management and Workshop Facilitation

Experience

• 10+ years in Cybersecurity delivery.
• Experience leading enterprise security assessments and advisory engagements.
• Hands-on experience with AI/GenAI| cloud security| and governance frameworks.
• Strong executive communication and client-facing consulting skills.

• Lead end-to‑end AI Security Assessment engagements| including planning| execution| reporting| and stakeholder management.
• Conduct AI/GenAI security| governance| risk| and compliance assessments.
• Facilitate discovery workshops and interviews with security| technology| data| risk| and business stakeholders.
• Assess AI platforms| LLM applications| model lifecycle controls| and supporting cloud infrastructure.
• Perform AI threat modeling and identify risks such as prompt injection| data leakage| model abuse| and supply chain vulnerabilities.
• Evaluate controls against NIST AI RMF| ISO 42001| OWASP LLM Top 10| and organizational security requirements.
• Develop gap analyses| risk ratings| remediation recommendations| and maturity assessments.
• Create executive‑ready assessment reports| roadmaps| and presentation materials.
• Provide strategic guidance on secure AI adoption| governance| and operationalization.
• Manage project governance| timelines| risks| issues| and customer communications.

Technical Skills

AI Security and Generative AI Security Large Language Models (LLMs) and AI/ML SecurityAI Governance and Responsible AINIST AI RMF| MITRE ATLAS and AI Threat Modeling, Microsoft Copilot and Azure OpenAI Security, Security Compliance and Regulatory Frameworks.

Stakeholder Management and Workshop FacilitationExperience8+ years in Cybersecurity delivery.

• Experience leading enterprise security assessments and advisory engagements.
• Hands-on experience with AI/GenAI| cloud security| and governance frameworks.
• Strong executive communication and client‑facing consulting skills.