AI Governance & Security Specialist

Trend, Inc.

Vancouver (WA)

On-site

USD 140,000 - 180,000

Full time

7 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Healthcare benefits

401k with company match

Catered lunch

Coffee

Tea and snacks

Paid parking

Competitive pay

Job summary

Trend, Inc. is seeking an AI Governance & Security Specialist to establish practical security standards for AI tools and systems.

You will work with AI builders to identify risks, set boundaries, and ensure deployments have proper infrastructure, access controls, monitoring, and oversight. This is a hands-on role for someone with strong network security and engineering experience and an operations-focused mindset.

Qualifications

Experience reviewing or securing AI applications and automated workflows.
Familiarity with identity and access management, secrets management, and incident response.
Experience partnering with developers, operations teams, leadership, and Legal on security standards.
Strong hands-on experience in network security and network engineering.
Experience in systems administration or security engineering with an operational focus.
Software development background or ability to read code and work with APIs.
Experience securing Linux environments, self-hosted services, and logging.
Working knowledge of AI tools, LLMs, agents and RAG systems and data access.
Ability to translate technical risks into clear restrictions and remediations.
Experience creating practical security policies and documenting exceptions.
Strong communication and balanced judgment for security vs. business needs.

Responsibilities

Maintain an inventory and risk classification of AI systems and tools.
Define approved and prohibited tools, infrastructure, and data flows.
Establish infrastructure requirements and self-hosting where required.
Review network exposure, ports, firewall rules, and remote access.
Set data handling rules for prompts, training data, logs, and vector stores.
Establish secure development standards including prompt injection defenses.
Conduct lightweight security reviews and threat modeling before launches.
Define approval criteria and elevate high-risk decisions to CIO and Legal.
Implement monitoring and response for data leakage and unapproved usage.
Train AI builders on approved practices and maintain checklists and docs.
Report coverage, adherence, risks, and incident trends to leadership.

Skills

AI security

Network security

IAM & secrets

Threat modeling

Incident response

DevOps collaboration

APIs & integrations

Linux administration

Code reading

Data handling policies

Security policy writing

Job description

About This Job

We’re looking for an AI Governance & Security Specialist to establish practical security standards for the AI tools and systems our teams build and use. You’ll work closely with AI builders to identify risks, set clear boundaries, and ensure systems are deployed with appropriate infrastructure, access controls, monitoring, and oversight. This is a hands-on role for someone with strong network security and engineering experience, an operations-focused background, and a working understanding of software development. You should be comfortable reviewing how systems connect, where data flows, and what needs to be restricted or secured before a tool goes live.

Responsibilities

Maintain an inventory and risk classification of AI systems and tools, including agents, copilots, third-party APIs, internal models, and retrieval-augmented generation (RAG) systems.
Define approved and prohibited tools, infrastructure, and data flows, with clear boundaries builders can apply in their daily work.
Establish infrastructure requirements, including use of the corporate VPN, restrictions on third-party VPNs and external management dashboards, and self-hosting on company infrastructure where required.
Review network exposure, open ports, firewall rules, service permissions, and remote access. Identify and help remediate insecure configurations.
Set data handling rules covering what may enter prompts, training datasets, logs, and vector stores, including restrictions on sensitive information.
Establish secure development standards for AI systems, including prompt injection defenses, least-privilege agent access, secrets management, output filtering, and human approval for sensitive actions.
Conduct lightweight, mandatory security reviews and threat modeling before new or significantly changed AI systems launch or scale.
Define clear approval criteria, document required fixes and remaining risks, and elevate high-risk decisions to the CIO and Legal teams in coordination with project managers.
Implement monitoring and response procedures for data leakage, unapproved AI usage, model abuse, and unusual agent activity.
Train AI builders on approved practices and maintain practical checklists and documentation that support consistent security compliance.
Report system coverage, policy adherence, unresolved risks, review findings, and incident trends to leadership.

Required Knowledge & Skills

Experience reviewing or securing AI applications and automated workflows.
Familiarity with identity and access management, service accounts, secrets management, and incident response.
Experience partnering with developers, operations teams, leadership, and Legal on security standards and compliance requirements.
Strong, hands-on experience in network security and network engineering, including firewalls, VPNs, segmentation, ports, protocols, and secure remote access.
Experience in systems administration, infrastructure operations, or security engineering, with a strong operational focus.
A software development background or practical experience reading code, writing scripts, reviewing integrations, and working with APIs.
Experience securing Linux environments, self-hosted services, access permissions, credentials, and logging.
Working knowledge of AI tools, LLM integrations, agents, and RAG systems, including how they access data and interact with other systems.
Ability to assess technical risks and translate findings into clear restrictions, required controls, and actionable remediation steps.
Experience creating and enforcing practical security policies, conducting technical reviews, and documenting exceptions.
Strong communication skills and sound judgment when balancing operational needs, security requirements, and business priorities.