AI Risk & Compliance Engineer

Cetera Financial Group Inc; Dallas (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Cetera Financial Group Inc. is seeking an AI Risk and Compliance Engineer to operationalize AI governance controls, manage AI-related third-party and vendor risk, and lead adversarial threat modeling for AI/ML systems using the MITRE ATLAS framework.

This role bridges IT Risk, Cloud Security, Legal/Procurement, and AI/ML Engineering within a regulated financial services environment. The candidate will coordinate audits, develop control narratives, and embed AI risk requirements into intake,

Qualifications

• 8-10+ years in IT/cyber risk, GRC, security engineering, or a related discipline with direct exposure to AI/ML systems
• Knowledge of AI risk frameworks (e.g., NIST AI RMF) and OWASP Top 10 for LLMs
• Practical experience with threat modeling methodologies for AI/ML systems, including familiarity with MITRE ATT&CK and MITRE ATLAS
• Experience building or operating third-party/vendor risk management processes—due diligence, contracting/SLAs, ongoing monitoring, and remediation
• Ability to translate technical risk findings into control objectives, policy language, and audit-ready documentation
• Experience in regulated environments (financial services or FINRA preferred)
• Strong communication skills across technical, risk, legal, and compliance stakeholders

Responsibilities

• Operationalize AI governance controls across AI risk management frameworks and evidence collection for audits
• Lead AI third-party risk management, evaluating AI tools and vendors against security, privacy, and compliance criteria
• Maintain AI/vendor risk inventories documenting provenance, functionality, and limitations
• Run ongoing AI risk assessments covering performance, data quality, bias, and security controls
• Perform AI threat modeling to identify adversarial tactics and risks across the ML lifecycle
• Coordinate red-teaming, adversarial testing, and penetration testing of AI/ML systems
• Integrate AI-specific vulnerabilities into enterprise vulnerability management processes
• Identify unsanctioned AI usage and recommend remediation or approval pathways
• Partner across IT Risk, Cloud Security, Legal, Procurement, and Engineering to embed AI risk requirements
• Support governance and audits by producing control evidence tied to the AI risk management framework

Skills

IT risk management

GRC

Security engineering

AI risk management

Threat modeling

Vendor risk management

Regulated environments

Cross-functional communication

Tools

MITRE ATLAS

NIST AI RMF

OWASP Top 10 for LLMs

Archer

ServiceNow GRC

AWS Bedrock

Job description

Cetera Financial Group Inc. is seeking an AI Risk and Compliance Engineer to operationalize AI governance controls, manage AI-related third-party and vendor risk, and lead adversarial threat modeling for AI/ML systems using the MITRE ATLAS framework.

This role bridges IT Risk, Cloud Security, Legal/Procurement, and AI/ML Engineering within a regulated financial services environment. The candidate will coordinate audits, develop control narratives, and embed AI risk requirements into intake,