Assistant Vice President, AI Security

Berkshire Hathaway Specialty Insurance; Boston (MA); In loco; USD 200.000 - 285.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health, Dental and Vision benefits

Disability Insurance

Life Insurance

401(k) with Company Match

Generous paid time off

Descrizione del lavoro

Berkshire Hathaway Specialty Insurance Company in Boston seeks an AVP of AI Security to lead the enterprise AI security program. Define strategy, governance, security controls, and risk management for AI systems, including LLMs, Generative AI, and third-party solutions.

This role partners with Technology, Data, Legal, Compliance, Privacy, Audit, and risk leaders to enable responsible AI innovation while maintaining a strong security posture. Competitive base salary posted.

Competenze

• 10-15+ years of progressive cybersecurity, technology risk, or security architecture experience.
• A true security mindset—balancing tactical changes with strategic vision.
• Demonstrated experience leading enterprise security programs in highly regulated industries such as Insurance, Financial Services, Healthcare, or Technology.
• Experience designing and implementing enterprise AI governance and security programs.
• Strong understanding of NIST AI Management Framework, ISO 42001, NIST Cybersecurity Framework, ISO 27001, SOC 2, GDPR, EU AI Act, State Privacy Laws and industry regulations.
• Certifications like CISSP, CISM, CRISC, CGRC, CCSP, CISA, CIPP/US are a plus.

Mansioni

• AI Security Strategy & Leadership: Develop and execute the enterprise AI Security Strategy aligned with organizational goals and risk appetite.
• AI Governance & Risk Management: Establish governance frameworks for AI development, procurement, deployment, and monitoring.
• AI Security Architecture: Define enterprise AI security architecture standards and reference designs.
• AI Threat & Vulnerability Management: Develop controls and monitoring to mitigate AI-specific threats.
• Regulatory Compliance & Assurance: Ensure AI programs align with ISO 42001, NIST AI RMF, NIST CSF, GDPR, EU AI Act.
• Data Protection & Privacy: Define data protection requirements for AI development and use.
• Third-Party AI Risk Management: Establish vendor assessment and due diligence processes.

Conoscenze

Cybersecurity leadership

Enterprise security programs

NIST CSF knowledge

ISO 27001 knowledge

GDPR & AI Act knowledge

Security governance

Strumenti

CISSP

CISM

Descrizione del lavoro

Salary Range: $200,000.00 To $285,000.00 Annually

Who are we?

A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway's insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.

We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty, and specialty lines insurance company in the world?

Berkshire Hathaway Specialty Insurance (BHSI) is looking for a strong leader in AI Security to join our Boston-based team. The AVP of AI Security will be responsible for establishing and leading the enterprise-wide AI security program, ensuring the secure, compliant and responsible adoption of Artificial Intelligence technologies across the organization. This leader will define strategy, governance, security controls, and risk management practices for AI systems, including Generative AI, Large Language Models (LLMs), Agentic AI, Machine Learning platforms, and third-party AI solutions.

The AVP of AI Security serves as the organization's senior authority on AI-related cyber risks and partners closely with Technology, Data, Legal, Compliance, Privacy, Audit, Enterprise Risk Management, and business leaders to enable innovation while maintaining a strong security and regulatory posture.

Duties & Responsibilities:

• AI Security Strategy & Leadership: Develop and execute the enterprise AI Security Strategy aligned with organizational goals and risk appetite. Establish a multi-year roadmap for AI security, governance, and risk management. Cultivate and direct a high-performing AI Security organization.
• AI Governance & Risk Management: Establish governance frameworks for AI development, procurement, deployment, and monitoring. Develop policies, standards, and procedures governing AI and Machine Learning technologies. Define risk assessment methodologies for Generative AI, Large Language Models, Agentic AI systems, Autonomous decision-making systems, Third-party AI platforms, Establish AI model inventories and risk-tiering methodologies. Define control frameworks for high-risk AI use cases.
• AI Security Architecture: Define enterprise AI security architecture standards and reference designs. Establish security requirements for LLMs, Retrieval-Augmented Generation (RAG), AI agents, Machine Learning platforms, Model hosting environments, AI APIs and integrations. Drive security-by-design and privacy-by-design principles into AI initiatives. Oversee AI threat modeling and security reviews.
• AI Threat & Vulnerability Management: Develop controls and monitoring capabilities to mitigate Prompt injection, Data poisoning, Model manipulation, Model theft, Training data compromise, Sensitive data leakage, AI supply chain attacks, Agent abuse and excessive autonomy risks. Assist with establishing AI-specific threat detection and security monitoring programs. Lead AI security incident response preparedness and recovery planning.
• Regulatory Compliance & Assurance: Ensure AI programs align with ISO 42001, NIST AI Risk Management Framework, NIST Cybersecurity Framework, EU AI Act, GDPR, State privacy regulations, Emerging AI governance requirements. Collaborate on regulatory examinations, internal audits related to AI and AI control testing and assurance programs.
• Data Protection & Privacy: Define and collaborate on data protection requirements for AI development and use. Partner with Privacy and Legal teams to ensure compliant use of sensitive information. Establish controls governing training data, model outputs, and data retention. Ensure AI solutions comply with enterprise data classification standards.
• Third-Party AI Risk Management: Establish AI vendor assessment and due diligence processes. Define contractual AI security and governance requirements. Evaluate third-party AI solutions and emerging technologies. Monitor vendor AI-related security and compliance risks.

Qualifications, Skills and Experience:

• 10-15+ years of progressive cybersecurity, technology risk, or security architecture experience.
• A true security mindset—balancing tactical changes with strategic vision.
• Demonstrated experience leading enterprise security programs in highly regulated industries such as Insurance, Financial Services, Healthcare, or Technology.
• Experience designing and implementing enterprise AI governance and security programs.
• Strong understanding of NIST AI Management Framework, ISO 42001, NIST Cybersecurity Framework, ISO 27001, SOC 2, GDPR, EU AI Act, State Privacy Laws and industry regulations
• Certifications like CISSP, CISM, CRISC, CGRC, CCSP, CISA, CIPP/US are a plus.

BHSI Offers:

• A competitive package and exciting growth opportunities for career-oriented teammates
• A dynamic, action-oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders
• A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework
• Benefits that support your life and well-being, which include:
• Comprehensive Health, Dental and Vision benefits
• Disability Insurance (both short-term and long-term)
• Life Insurance (for you and your family)
• Accidental Death & Dismemberment Insurance (for you and your family)
• Flexible Spending Accounts
• Health Reimbursement Account
• Employee Assistance Program
• Retirement Savings 401(k) Plan with Company Match
• Generous holiday and Paid Time Off
• Tuition Reimbursement

The base salary range for this position in Boston is $200,000 to $285,000, along with annual bonus eligibility; a candidate’s salary is determined by their relevant skills and experience. We value our teammates – both their capabilities and character – as demonstrated by our amazing culture.

NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.