AI Security Risk & Compliance Architect (Principal)

Cybersecurity Jobs; Ashburn (VA); Hybrid; USD 121,000 - 231,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Matched 401(k) savings plan

Paid parental leave

Tuition assistance

Life insurance

Job summary

Cybersecurity Jobs in Ashburn, VA is seeking a Principal Security Risk & Compliance lead to shape audits, governance, and risk management across enterprise AI programs and emerging networks. The role is hybrid in Ashburn, with a focus on aligning security compliance with enterprise risk management for auditable AI deployments.

The candidate will design an AI risk management framework, lead SOC 2 Type II and ISO 27001 audits, assess AI vendor security and data practices, and guide product teams

Qualifications

• Bachelor’s degree or four or more years of work experience.
• Six or more years of relevant experience in Information Security Risk Management, IT Audit, or GRC.
• Experience evaluating risks tied to AI/ML systems, LLMs, data pipeline security, or AI vendor tools.
• Proven track record leading SOC 2 Type II audits and ISO 27001 certifications.
• Familiarity with NIST SP 800-53/800-171, NIST CSF, PCI-DSS, HIPAA, and AI frameworks like NIST AI RMF.
• Understanding of cloud infrastructure (AWS/GCP/Azure), API security, data pipeline architecture, SDLC.

Responsibilities

• Design, implement, and maintain AI risk management framework aligned to NIST AI RMF, ISO 42001 and EU AI Act.
• Lead end-to-end internal and external security audits (SOC 2 Type II, ISO 27001) with evidence collection and remediation tracking.
• Assess third-party AI and SaaS providers for security posture and regulatory compliance.
• Conduct security risk assessments and threat modeling for AI/ML initiatives, LLM integrations, and core platform capabilities.
• Advise Product, Engineering, and Business on Security & Privacy by Design within roadmaps.
• Create metrics, KRIs, and dashboards for the CISO and Executive Risk Committee.

Skills

Security risk management

IT audit

GRC

SOC 2 Type II

ISO 27001

NIST CSF

AI/ML risk assessment

Education

Bachelor’s degree

Tools

Vanta

Drata

LogicGate

ServiceNow

Job description

Cybersecurity Jobs in Ashburn, VA is seeking a Principal Security Risk & Compliance lead to shape audits, governance, and risk management across enterprise AI programs and emerging networks. The role is hybrid in Ashburn, with a focus on aligning security compliance with enterprise risk management for auditable AI deployments.

The candidate will design an AI risk management framework, lead SOC 2 Type II and ISO 27001 audits, assess AI vendor security and data practices, and guide product teams