AI Security & Governance Analyst

Walker Elliott; Houston (TX); Remote; USD 110,000 - 160,000; Full time

Job summary

Walker Elliott seeks a security professional to govern AI usage across software development and business tools while supporting day-to-day information security operations. You will work with development, compliance, and IT to implement guardrails that enable safe innovation.

The role blends hands-on security work with policy development, incident response, and vendor risk management, requiring collaboration across domestic and international teams.

Qualifications

• 3+ years in AI application security, secure code review, SDLC, or AI governance.
• Experience with secure development practices and AI risk frameworks.
• Familiarity with Windows, Microsoft 365, Purview, and AI tools like Copilot, Claude, Harvey.

Responsibilities

• Review AI-generated code, ML systems, and model behavior for security gaps.
• Draft and maintain AI governance policies and control documentation.
• Configure and monitor SIEM, EDR, DLP, and application scanners.
• Support incident response, containment, and remediation with teams.
• Assist in vendor security assessments and third-party risk governance.

Skills

AI governance

AI/ML security

Vulnerability assessment

SIEM

EDR

DLP

SAST/DAST/SCA

Python/PowerShell

Cloud security

Incident response

Education

Bachelor's degree in Cybersecurity/CS/Info Systems

Tools

SIEM

EDR

Vulnerability management tools

Endpoint protection platforms

Microsoft 365 security tools

Job description

Location: Austin, Dallas, or Houston, TX

Our client is expanding the use of AI across software development and everyday business tools, they are looking for a security professional to help us do it safely. In this role, you'll be the go-to person for understanding how AI systems, AI-assisted code, and AI-powered vendor products affect the risk posture, and for shaping the guardrails that let teams innovate with confidence. You'll split your time between leading the AI security and governance efforts and supporting the broader information security team on day-to-day operations. This is a great fit for someone who enjoys hands-on technical work, clear writing, and collaborating across development, compliance, and IT.

Candidates must be based in Austin, Dallas, or Houston (the role is remote).

Responsibilities

• Review AI-generated code, machine learning systems, and model behavior to uncover security weaknesses and governance concerns
• Recommend tools, controls, and fixes that address AI-related vulnerabilities and design issues, working closely with developers and security leadership
• Help build the frameworks, standards, and best practices that guide how we develop and adopt AI, including third-party AI products
• Draft and maintain AI governance policies, procedures, and control documentation alongside compliance and technology partners
• Serve as backup to the security team for routine operations, including tool administration, alert monitoring, and incident triage
• Configure, tune, and monitor security platforms such as SIEM/SOAR, EDR/antivirus, endpoint privilege management, vulnerability management, DLP, phishing protection, and application security scanners
• Act as the escalation point for security issues coming from the help desk, and keep IT support teams, both domestic and international, connected with Information Security
• Investigate security events affecting applications and platforms, coordinate containment and remediation, and document outcomes per our incident response process
• Work with infrastructure, application, cloud, and AI teams to roll out secure configurations, least-privilege access, and compensating controls
• Drive vulnerability remediation with technical teams, confirm fixes, and report on progress and metrics
• Support access reviews, account administration, and evidence gathering for audits
• Contribute to compliance work, including certifications, client and internal assessments, control testing, and audit documentation
• Help assess vendor security through questionnaires, document review, and remediation tracking
• Create security awareness material on safe application use, data handling, and spotting phishing
• Take on other projects as needs arise

Requirements

• A degree in Cybersecurity, Computer Science, Information Systems, or a related field is preferred
• 3 or more years in AI application security, secure code review, SDLC, or AI governance, or in security functions such as vulnerability management, security scanning, endpoint protection, identity and access, assessments, or incident response
• Experience with secure development practices, common application risks (e.g., OWASP Top 10), AI security risks and governance frameworks, and core control areas like access control, logging, change management, and data protection
• Experience assessing AI/ML systems and reviewing code for security issues
• Familiarity with Windows, Microsoft 365, Microsoft Purview, and AI tools such as Microsoft Copilot, Claude, and Harvey
• Hands-on experience with SIEM, EDR, vulnerability management, DLP, email security, and SAST/DAST/SCA tools is a plus
• Ability to analyze logs and findings, write clear remediation guidance, and verify fixes
• Python or PowerShell scripting is a bonus; exposure to cloud platforms, AI platforms, and CI/CD pipelines is recommended
• Current security certification (or willingness to obtain one), such as Security+, SSCP, CSSLP, CISSP, CISA, or AAISM

Do not apply unless you are authorized to work in the United States for any employer as client company cannot sponsor or transfer visas at this time.

Walker Elliott is an Equal Opportunity Employer.