AI Governance & Security Specialist

Trend Capital Holdings, Inc.; Vancouver (WA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Full healthcare package

401k with company match

Catered lunch

Coffee, tea and snacks

Paid parking

Competitive pay

Job summary

Trend Capital Holdings, Inc. in Vancouver, WA is seeking an AI Governance & Security Specialist to establish practical security standards for AI tools and systems used by our teams.

You’ll work closely with AI builders to identify risks, set clear boundaries, and ensure deployments include appropriate infrastructure, access controls, monitoring, and oversight. This hands-on role requires strong network security and engineering experience, an operations focus, and a working understanding of

Qualifications

• Experience securing AI applications and automated workflows.
• Familiarity with identity and access management and secrets management.
• Experience partnering with developers, operations, leadership, and Legal on security standards.
• Strong hands-on network security and engineering experience.
• Operational focus with systems administration or infrastructure operations.
• Software development background or ability to read code and work with APIs.

Responsibilities

• Maintain inventory and risk classification of AI systems and tools.
• Define approved and prohibited tools, infrastructure, and data flows, with clear boundaries for builders.
• Establish infrastructure requirements including VPN use and self-hosting where required.
• Review network exposure, ports, firewall rules, and remote access; remediate insecure configurations.
• Set data handling rules for prompts, training datasets, logs, and vector stores.
• Establish secure development standards including prompt injection defenses and least-privilege access.
• Conduct lightweight security reviews and threat modeling before rollout of new AI systems.
• Escalate high-risk decisions to CIO and Legal teams with project managers.
• Implement monitoring for data leakage, unapproved AI usage, model abuse, and unusual activity.
• Train AI builders on approved practices and maintain checklists and documentation.
• Report system coverage, policy adherence, unresolved risks, and incident trends to leadership.

Skills

AI security

Network security

Threat modeling

IAM / Secrets mgmt

Security reviews

DevOps security

Code reading

Tools

Firewalls

VPNs

Secrets management

Logging systems

Job description

Trend · Vancouver, WA 98660 · Full-Time · Information & Network Security Engineers & Analysts

We’re looking for an AI Governance & Security Specialist to establish practical security standards for the AI tools and systems our teams build and use. You’ll work closely with AI builders to identify risks, set clear boundaries, and ensure systems are deployed with appropriate infrastructure, access controls, monitoring, and oversight.

This is a hands‑on role for someone with strong network security and engineering experience, an operations‑focused background, and a working understanding of software development. You should be comfortable reviewing how systems connect, where data flows, and what needs to be restricted or secured before a tool goes live.

RESPONSIBILITIES

• Maintain an inventory and risk classification of AI systems and tools, including agents, copilots, third‑party APIs, internal models, and retrieval‑augmented generation (RAG) systems.
• Define approved and prohibited tools, infrastructure, and data flows, with clear boundaries builders can apply in their daily work.
• Establish infrastructure requirements, including use of the corporate VPN, restrictions on third‑party VPNs and external management dashboards, and self‑hosting on company infrastructure where required.
• Review network exposure, open ports, firewall rules, service permissions, and remote access. Identify and help remediate insecure configurations.
• Set data handling rules covering what may enter prompts, training datasets, logs, and vector stores, including restrictions on sensitive information.
• Establish secure development standards for AI systems, including prompt injection defenses, least‑privilege agent access, secrets management, output filtering, and human approval for sensitive actions.
• Conduct lightweight, mandatory security reviews and threat modeling before new or significantly changed AI systems launch or scale.
• Define clear approval criteria, document required fixes and remaining risks, and **escalate** high‑risk decisions to the CIO and Legal teams in coordination with project managers.
• Implement monitoring and response procedures for data leakage, unapproved AI usage, model abuse, and unusual agent activity.
• Train AI builders on approved practices and maintain practical checklists and documentation that support consistent security compliance.
• Report system coverage, policy adherence, unresolved risks, review findings, and incident trends to leadership.

REQUIRED KNOWLEDGE & SKILLS

• Experience reviewing or securing AI applications and automated workflows.
• Familiarity with identity and access management, service accounts, secrets management, and incident response.
• Experience partnering with developers, operations teams, leadership, and Legal on security standards and compliance requirements.
• Strong, hands‑on experience in network security and network engineering, including firewalls, VPNs, segmentation, ports, protocols, and secure remote access.
• Experience in systems administration, infrastructure operations, or security engineering, with a strong operational focus.
• A software development background or practical experience reading code, writing scripts, reviewing integrations, and working with APIs.
• Experience securing Linux environments, self‑hosted services, access permissions, credentials, and logging.
• Working knowledge of AI tools, LLM integrations, agents, and RAG systems, including how they access data and interact with other systems.
• Ability to assess technical risks and translate findings into clear restrictions, required controls, and actionable remediation steps.
• Experience creating and enforcing practical security policies, conducting technical reviews, and documenting exceptions.
• Strong communication skills and sound judgment when balancing operational needs, security requirements, and business priorities.

Our company offers great benefits: full healthcare package (medical, dental, vision, life), 401k with a company match, catered lunch, coffee, tea and snacks, paid parking, competitive pay, and much more! Anyone who joins our team will have great potential for career and personal growth.