AI Risk & Security Leader

Thomas Jefferson University; Orlando (FL); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Tuition assistance

Retirement plans

Dental

Job summary

Thomas Jefferson University seeks a Manager, Technology, AI, and Security Risk to lead its Security Risk Assessment portfolio with hands-on technical focus. The role reviews architecture, design and controls of internal apps, AI-enabled systems, APIs, and cloud environments, translating findings into prioritized risk decisions.

Beyond technical work, the role oversees GRC components, including control framework management, regulatory assessments, external risk, and cloud posture management,

Qualifications

• Bachelor’s Degree in science, technology, engineering, or math discipline
• 7 years related work experience

Responsibilities

• Lead security architecture reviews for internally developed apps, AI systems, APIs, and cloud environments.
• Perform threat modeling and secure design reviews across the development lifecycle.
• Define assessment approach for AI/ML systems including data governance, prompt security, and guardrails.
• Evaluate and validate controls at application, integration, and infrastructure layers (authentication, encryption, logging).
• Own the Security Risk Assessment portfolio end to end with rigorous methodology and reporting.
• Lead cloud security posture management, including configuration, IAM design, and asset visibility.
• Assess third‑party and medical device risk with attention to technical interfaces and data exchange.
• Maintain the cyber risk register and translate findings into risk decisions.
• Drive remediation of findings from reviews, assessments, audits, and testing.
• Ensure compliance with HIPAA, NIST, PCI and update secure-design standards as needed.
• Partner with engineering, cloud, data, and AI teams to embed security into system design and operation.
• Advance AI enablement with AI-assisted automation to strengthen efficiency and scale.

Skills

Security architecture reviews

Threat modeling

Risk assessment

GRC management

Education

Bachelor's degree in STEM

Job description

Thomas Jefferson University seeks a Manager, Technology, AI, and Security Risk to lead its Security Risk Assessment portfolio with hands-on technical focus. The role reviews architecture, design and controls of internal apps, AI-enabled systems, APIs, and cloud environments, translating findings into prioritized risk decisions.

Beyond technical work, the role oversees GRC components, including control framework management, regulatory assessments, external risk, and cloud posture management,