AI Security Risk & GRC Architect

Verizon; Basking Ridge (NJ); Hybrid; USD 121,000 - 231,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid time off

Job summary

Verizon seeks a Security Risk & Compliance Lead to shape security governance for enterprise and public sector, focusing on risk management, audit readiness, and AI governance. You’ll bridge traditional security controls with AI-enabled deployments, partnering with Product, Engineering, and leadership to build risk-informed roadmaps.

You’ll design and oversee NIST/ISO frameworks, lead SOC 2 Type II and ISO 27001 audits, evaluate vendor risk, and develop metrics for executive reviews.

Qualifications

• Bachelor’s degree or equivalent experience.
• Six or more years of relevant experience required.
• Experience in Information Security Risk Management, IT Audit, or GRC.
• Experience evaluating risks of AI/ML systems and LLMs.
• Proven track record leading SOC 2 Type II audits and ISO 27001 programs.

Responsibilities

• Design, implement, and maintain the enterprise AI Risk Management Framework.
• Lead end-to-end internal and external security audits (SOC 2 Type II, ISO 27001).
• Evaluate third-party SaaS vendors and AI model providers for security posture.
• Perform security risk assessments and threat modeling for AI/ML initiatives.
• Embed Security & Privacy by Design into product roadmaps in collaboration with stakeholders.
• Establish metrics and dashboards for executive risk reporting.

Skills

Information security risk management

GRC

Audit readiness

AI governance

Communication

Education

Bachelor’s degree or equivalent experience

Tools

Vanta

Drata

LogicGate

ServiceNow

Job description

Verizon seeks a Security Risk & Compliance Lead to shape security governance for enterprise and public sector, focusing on risk management, audit readiness, and AI governance. You’ll bridge traditional security controls with AI-enabled deployments, partnering with Product, Engineering, and leadership to build risk-informed roadmaps.

You’ll design and oversee NIST/ISO frameworks, lead SOC 2 Type II and ISO 27001 audits, evaluate vendor risk, and develop metrics for executive reviews.