AI Governance Lead Analyst

Cambium Learning Group; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Remote-first environment

Home office stipend

Home setup reimbursement

Job summary

Cambium Learning Group is seeking a senior cybersecurity leader to drive AI governance, risk assessments, and secure development across our AI-enabled educational platforms. The role coordinates with multiple teams to ensure regulatory compliance and robust security postures for cloud, data, and applications.

The candidate will guide executives on risk, lead cross-functional security initiatives, and participate in audits and training programs to sustain our high security standards.

Qualifications

• Minimum 10 years hands-on experience in the Cybersecurity field.
• AI governance and risk assessment conforming to ISO 42001, NIST, and EU AI Act.
• Leading cross-functional projects across data protection, infrastructure, security operations, and app security.

Responsibilities

• Lead programs for AI governance, risk assessments, and secure AI systems deployment.
• Review requirements against AI usage and regulatory obligations.
• Advise stakeholders on AI security strategy decisions and risk posture.
• Plan and manage multiple improvement projects from requirements through deployment.
• Coordinate with teams to translate objectives into verifiable technical results.
• Support audits and trainings across teams; ensure conformance to security standards.

Skills

AI governance

Risk assessment

Security leadership

Regulatory compliance

Cross-functional coordination

Executive communication

Education

Master’s degree in information security

CISSP certification

GIAC Cloud Security certification

AWS Security certification

Tools

SOC monitoring

Threat modeling tools

Security auditing tools

Job description

Job Overview

The ideal candidate will use their well-rounded technology and security background to effectively lead and coordinate among teams responsible for our educational testing business processes, notably our established teams that provide software development, security testing and monitoring, cloud-based infrastructure, enterprise IT support, and project/customer management.

Job Responsibilities

Leading our internal programs related to AI governance, risk assessments, and the secure development and implementation of generative and agentic AI systems. Reviewing customer requirements and regulatory obligations against our current and planned AI usage. Advising internal stakeholders and teams on AI security and strategy decisions. Plan and manage multiple improvement projects from requirements phase through deployment/implementation. Tasks need to meet both customer-required milestones and benchmarks related to security, privacy, and ethical use. Create a structure to manage AI agents and their activities Automate AI governance by identifying and establishing system management tools. Coordinating with multiple internal functional teams to translate strategic objectives into implementable technical requirements and verifiable results. Responding to requests for information from executives, proposal teams, delivery teams, and external third parties. Support AIMS committee activities and provide solutions. Ensuring all programs conform to our high bar for security standards. This includes but is not limited to conformance with ISO 42001, ISO 27001, ISO 27018, Privacy laws, ISO 9001, GovRAMP, FedRAMP, NIST 800, SOC, and CIS Top Controls. Contribute to independent audits of our organization by third-party experts. Responsible for training programs necessary for various teams and roles. Maintains and improves training campaigns and content. Conducts internal reviews and risk assessments and reports out to senior management regarding observations and metrics – both as an ongoing process and as-needed. Assists in continual improvement by examining our current security and privacy posture and practices, identifying risks or gaps, and recommending programs to address them.

To learn more about our organization and the exciting work we do, visit https://www.cambiumassessment.com/

Job Requirements

Minimum 10 years hands-on experience in the Cybersecurity field Demonstrated working experience: Reviewing and advising AI and machine learning architectures Advising on the risks, trends, and threat environment surrounding AI, machine learning, and emerging technologies. This includes AI Governance and Risk Assessment conforming to ISO 42001, NIST, and the EU AI Act Leading projects or strategic initiatives that span across multiple cross-functional teams responsible for data protection, infrastructure, security operations, and application security Complying with security and privacy frameworks and industry best practices, including direct participation in internal and third-party audits Architecting Cybersecurity solutions Monitoring security events in a SOC environment Working with software development teams hands-on either as a developer, tester, or reviewer of critical milestones. Reducing technology-based risks by conducting risk assessments, gap analysis, improvement plans and tracking associated actions to closure Developing and executing project management plans for technical projects. Effectively communicating and coordinating with senior business leaders, subject matter experts, technical leaders and third party consultants. Delivering results and meeting deadlines independently and by collaborating as part of a team Ability to manage and prioritize multiple tasks in a dynamic environment Experience implementing and managing AI cybersecurity controls Experience with AI threat modeling, security assessments, and/or secure development

Preferred Qualifications

Master’s Degree or higher in Information Security, Cybersecurity, computer science, engineering, Information Systems or related technical field Extensive and deep knowledge of AI Governance, Security and Privacy frameworks, standards, and industry best practices. Strong, professional. and effective communication skills and interpersonal skills to effectively and accurately communicate with a variety of teams ranging from highly detailed discussions with technical and subject matter experts to executive-level communications required for senior leaders and decisionmakers. Extensive and deep knowledge of tools and techniques used to protect against cybersecurity attacks and respond to incidents. Information Security Certifications such as CISSP, GIAC Cloud Security, AWS Security Relevant AI training and certifications related to governance, risk analysis and agentic security .

Remote First Work Environment

Our Remote First approach gives employees the flexibility and trust they need to effectively balance work with life. It creates a culture in which all employees are valued and where success is measured in results. It allows us to work collaboratively, inclusively and for greater positive impact, regardless of our individual locations. If you will be working remotely, either occasionally or on a permanent basis, you must have a reliable internet connection through a cable or fiber-optic broadband service with minimum speeds of 10 Mbps download and 5 Mbps upload. The successful candidate will be expected to actively participate in video-based interviews during the recruiting process and ongoing virtual meetings with their camera on, as part of their role. To maintain confidentiality and ensure a fair evaluation process, the use of note-taking tools, reference materials, or AI-powered tools (including generative AI, language models, or similar technologies) during interviews or other selection activities is prohibited unless prior written approval has been obtained from the People Experience team. If you require an exception for medical, accessibility, or other reasons, please contact your Talent Acquisition team member to discuss accommodations in advance. As part of our Remote-First benefits, Cambium offers reimbursement to help cover the cost of setting up your home or remote office.

An Equal Opportunity Employer

We are dedicated to fostering a culture that celebrates unique backgrounds, ideas, and experiences. All qualified applicants will receive consideration for employment without discrimination on the basis of race, color, age, religion, sex (including pregnancy, gender, gender identity/expression, or sexual orientation), national origin, protected veteran status, disability, or genetic information (including family medical history). We will provide reasonable accommodations for qualified individuals with disabilities. You may request an accommodation during the recruiting process with your Talent Acquisition team member.

About Cambium

Cambium Learning® Group is the education essentials company. With an intentionally curated portfolio of respected global brands, Cambium serves as a leader in the education space, helping millions of educators and students feel more universally valued each and every day. In everything we do and across all our brands, we focus on the elements that are most essential to the success of education.

Our family of companies includes: Cambium Assessment Lexia® Learning Learning A-Z® Voyager Sopris Learning® ExploreLearning® Time4Learning® Kurzweil Education®. To learn more about the Cambium organization and our other career opportunities, visit www.cambiumlearning.com/about-us/careers

As a group, we value: Simplicity - Across all our teams and all areas of our business, we create simplicity, making things easier and more clear for all those we work with. Certainty - We continually strive to eliminate doubt, delivering solutions, services and communications that our customers know they can count on. Now - We understand the need to make a difference not only for the future, but for today, and our people are committed to making the most of each moment we spend serving our customers.