AI Security Lead & Governance Architect

EY; New York (NY); On-site; USD 126,000 - 210,000; Full time

Job summary

EY is seeking a Senior Consultant in AI Security to assess AI risk postures, architect AI security controls, and develop governance frameworks that enable responsible AI adoption. You will mix hands‑on implementation with strategic advisory across diverse industries and collaborate with EY engagement teams.

The role requires 3–5 years in cybersecurity with 1–2 in AI security, strong communication, and the ability to travel 25–50% to meet client needs.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field with 3–5 years of relevant experience
• Experience in AI security assessments, AI‑SPM, or AI model risk evaluations
• Familiarity with AI security frameworks (NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS) and CSF/ISO 27001 applications

Responsibilities

• Deliver AI security engagements including AI Security Posture Management (AI‑SPM) and governance
• Conduct AI security assessments of AI/ML pipelines and model infrastructure
• Architect and implement AI‑SPM solutions and governance controls
• Prepare client deliverables and executive-level presentations
• Mentor junior team members and contribute to EY practice-building efforts
• Collaborate with cross‑functional EY teams and support project planning

Skills

AI architectures

AI-SPM

AI risk assessment

DevSecOps tooling

AI governance

Communication

Executive reporting

Security architecture docs

Education

Bachelor’s degree in Cybersecurity/CS/related field

Graduate degree with 2–4 years relevant experience

Tools

AI-SPM platforms

Harnesses

Cloud security (AWS/Azure/GCP)

CI/CD security tooling

Job description

EY is seeking a Senior Consultant in AI Security to assess AI risk postures, architect AI security controls, and develop governance frameworks that enable responsible AI adoption. You will mix hands‑on implementation with strategic advisory across diverse industries and collaborate with EY engagement teams.

The role requires 3–5 years in cybersecurity with 1–2 in AI security, strong communication, and the ability to travel 25–50% to meet client needs.