AI and Technology Security Risk Lead

Jefferson Health; Fort Washington (Montgomery County); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Retirement plans

Tuition assistance

Disability insurance

Job summary

Jefferson Health is seeking a Manager, Technology, AI, and Security Risk to lead the organization's Security Risk Assessment portfolio with a hands-on security architecture focus. You will review architecture, design, and controls of internal apps, AI-enabled systems, APIs, cloud environments, and external connections to drive prioritized risk decisions.

You will own GRC components, including control framework management, regulatory assessments, third-party risk, cyber risk, and cloud posture

Qualifications

• Bachelor’s Degree in science, technology, engineering, or math discipline.
• 7 years related work experience.

Responsibilities

• Lead security architecture reviews across internal apps, AI systems, APIs and cloud environments.
• Perform threat modeling and secure design reviews through the development lifecycle.
• Define assessment approaches for AI/ML systems including data governance and guardrails.
• Evaluate and validate security controls across application, integration and infrastructure layers.
• Own the Security Risk Assessment portfolio end to end with consistent methodology.

Skills

Security Architecture

Risk Management

GRC

AI Security

Cloud Security

Leadership

Education

Bachelor’s Degree in science, technology, engineering, or math discipline

Job description

Jefferson Health is seeking a Manager, Technology, AI, and Security Risk to lead the organization's Security Risk Assessment portfolio with a hands-on security architecture focus. You will review architecture, design, and controls of internal apps, AI-enabled systems, APIs, cloud environments, and external connections to drive prioritized risk decisions.

You will own GRC components, including control framework management, regulatory assessments, third-party risk, cyber risk, and cloud posture