AI Governance Security Analyst (Hybrid)

Form Energy; Somerville (MA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Stock options

Competitive salary

Holistic benefits

Hybrid work model

Job summary

Form Energy in Somerville, MA is seeking an Information Security Analyst, AI Governance who will own the full lifecycle of AI tools: evaluating new AI applications before adoption, securing them against data-exposure and misuse, deploying and configuring them for business use, and managing ongoing performance, access, and governance. Relocation assistance is available.

You will lead security reviews of AI tools, manage deployment, maintain an inventory and risk register, and define guardrails

Qualifications

• Experience evaluating, deploying, or managing AI applications, copilots, or LLM-based tools in a business/enterprise IT setting.
• Knowledge of AI/LLM security concepts: data exfiltration risk, prompt injection, model access controls, plugin/tool permission scopes, and agent autonomy risk.
• Familiarity with SaaS security fundamentals: OAuth and API permission review, third‑party integration risk assessment, and access governance.

Responsibilities

• Own the intake and review process for new AI applications, skills, plugins, and agents - assess business value, data access, permission scope, and vendor security posture.
• Lead security review of AI tools, including data handling, model trust boundaries, prompt-injection and jailbreak exposure, third-party plugin risk, and integration permissions.
• Manage deployment and configuration of approved AI applications across the organization, including access provisioning and rollout communication.
• Establish and maintain an inventory and risk register of all AI applications, skills, plugins, and agents in use.
• Define and enforce guardrails for agentic tools, including autonomous actions, approvals, logging, and rollback procedures.
• Monitor usage, cost, and performance of deployed AI tools, and manage vendor relationships including renewals and updates.
• Collaborate with IT security, legal, and business stakeholders to develop AI usage policies and acceptable-use guidelines.
• Investigate and respond to AI-related incidents, coordinating remediation and post-incident review.
• Create lightweight docs, training, and office-hours support to help employees use approved AI tools safely.
• Stay current on AI tool landscape and flag emerging capabilities or risks.

Skills

AI security

SaaS security fundamentals

OAuth & API review

Stakeholder management

Project & program management

Clear communication

Job description

Form Energy in Somerville, MA is seeking an Information Security Analyst, AI Governance who will own the full lifecycle of AI tools: evaluating new AI applications before adoption, securing them against data-exposure and misuse, deploying and configuring them for business use, and managing ongoing performance, access, and governance. Relocation assistance is available.

You will lead security reviews of AI tools, manage deployment, maintain an inventory and risk register, and define guardrails