AI & Security Risk Lead - Architecture & GRC

Jefferson Health Plans; Pennsylvania; Presencial; USD 150.000 - 190.000; Tempo integral

Benefícios oferecidos por esta vaga

Medical insurance

Tuition assistance

Retirement plans

Resumo da vaga

Thomas Jefferson University seeks a Manager, Technology, AI, and Security Risk to lead the Security Risk Assessment portfolio with hands-on security architecture focus. You will review architecture, design, and controls of AI-enabled apps, APIs, and cloud environments, turning findings into prioritized risk decisions while managing GRC activities and regulatory compliance.

You will partner with engineering, cloud, data, and AI teams to embed security, drive AI enablement securely, and advance

Qualificações

• Bachelor’s Degree in science, technology, engineering, or math.
• 7 years related work experience.
• Physical Demands: Lift and carry 25 lbs., frequent sitting/standing, keyboard use.

Responsabilidades

• Lead security architecture reviews across applications, AI systems and APIs, and cloud environments.
• Perform threat modeling and secure design reviews throughout the development lifecycle.
• Define assessment approaches for AI/ML systems including governance and security.
• Evaluate security controls across application, integration, and infrastructure layers.
• Own the Security Risk Assessment portfolio end to end with rigorous methodology and reporting.
• Lead cloud security posture management and identity design.
• Assess third-party, medical device, and B2B integration risk with focus on interfaces and data exchange.
• Maintain the cyber risk register and translate findings into risk decisions.
• Drive remediation to achieve verified technical closure and ensure compliance with HIPAA/NIST/PCI.

Formação

Bachelor’s Degree in science, technology, engineering, or math discipline

Descrição da vaga

Thomas Jefferson University seeks a Manager, Technology, AI, and Security Risk to lead the Security Risk Assessment portfolio with hands-on security architecture focus. You will review architecture, design, and controls of AI-enabled apps, APIs, and cloud environments, turning findings into prioritized risk decisions while managing GRC activities and regulatory compliance.

You will partner with engineering, cloud, data, and AI teams to embed security, drive AI enablement securely, and advance