AI Security Strategy & Governance Lead

Bank of America; Chicago (IL); On-site; USD 142,000 - 203,000; Full time

Job summary

Bank of America is seeking an AI Security Enablement - Strategy and Standards Lead to develop and operationalize AI security strategy and standards across cyber security. You will translate industry practices into actionable control requirements and drive governance at the intersection of AI risk and information security.

The role collaborates with engineering, risk, and business teams to implement secure AI controls, assess threats, and communicate results to senior leadership.

Qualifications

• 5+ years of cybersecurity experience with at least 2 years focused on AI/ML security.
• Strong knowledge of Generative AI, LLMs, and assessment frameworks.
• Experience with MITRE ATLAS, OWASP Top 10 for GenAI, and NIST AI RMF.
• Ability to partner with engineering, risk, and business teams to operationalize secure AI.
• Excellent executive presentation and communication skills.
• Capability to design and secure cloud-based workloads.

Responsibilities

• Define and lead the AI security strategy and standards for AI/ML systems across data, models, APIs, and integrations.
• Identify and mitigate AI-specific risks and governance including prompt injection and data leakage.
• Partner with engineering, risk, and business teams to operationalize secure AI practices.
• Define security requirements and ensure traceability between controls, risks and governance frameworks.
• Monitor information security trends and keep leadership informed.

Skills

Cybersecurity

AI/ML security

Executive communication

Stakeholder alignment

Policy & controls

Cloud security

Threat modeling

Education

Bachelors or Masters in CS/IT

Job description

Bank of America is seeking an AI Security Enablement - Strategy and Standards Lead to develop and operationalize AI security strategy and standards across cyber security. You will translate industry practices into actionable control requirements and drive governance at the intersection of AI risk and information security.

The role collaborates with engineering, risk, and business teams to implement secure AI controls, assess threats, and communicate results to senior leadership.