AI Security Risk & Governance Architect

ITSMF; Ashburn (VA); Hybrid; USD 121,000 - 231,000; Full time

Job summary

Verizon is seeking an experienced Security Risk & Compliance Lead to shape the future of our products and services for enterprise and public sector customers, focusing on security risk, audit readiness, and AI governance. You will bridge traditional security controls with AI deployments and work with stakeholders to enable rapid innovation while safeguarding data and system integrity.

The role requires leading SOC 2 Type II and ISO 27001 audits, aligning with NIST and AI RMF frameworks, and

Qualifications

• Experience evaluating risks in AI/ML systems and LLMs.
• Proven track record leading SOC 2 Type II audits and ISO 27001.
• Knowledge of NIST CSF / NIST 800-53 and PCI-DSS.

Responsibilities

• AI Governance & Risk Management: Design and maintain the enterprise AI Risk Management Framework aligned with NIST and ISO.
• Audit & Compliance Management: Lead internal and external security audits (SOC 2 Type II, ISO 27001).
• Third-Party AI & Vendor Risk: Evaluate third-party AI vendors for security posture and compliance.
• Threat Modeling & Risk Assessments: Perform risk assessments for AI/ML initiatives.
• Cross-Functional Advisory: Advise Product/Engineering on Security & Privacy by Design.
• Metrics & Board Reporting: Establish metrics and dashboards for executive risk oversight.

Skills

Security Risk Management

IT Audit

GRC

AI governance

SOC 2 Type II

ISO 27001

NIST 800-53

Education

Bachelor's degree or 4+ years experience

Tools

Vanta

Drata

LogicGate

ServiceNow

Job description

Verizon is seeking an experienced Security Risk & Compliance Lead to shape the future of our products and services for enterprise and public sector customers, focusing on security risk, audit readiness, and AI governance. You will bridge traditional security controls with AI deployments and work with stakeholders to enable rapid innovation while safeguarding data and system integrity.

The role requires leading SOC 2 Type II and ISO 27001 audits, aligning with NIST and AI RMF frameworks, and