Cybersecurity Analyst (Security & AI Governance) – Washington, DC

Cogent Communication; Washington (District of Columbia); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

PTO

401(k) match

Stock options

Parental Leave

Job summary

Cogent Communications is seeking a Cybersecurity Analyst (Security & AI Governance) to protect information assets, IT infrastructure, applications, cloud environments, data, and AI initiatives from cyber threats.

The role collaborates with IT, software teams, and stakeholders to align security with policies, standards, and AI governance frameworks. Starting salary range is $110,000–$130,000 with full benefits.

Qualifications

• Associate's or Bachelor's degree in cybersecurity, information technology, information systems, computer science, risk management, business, or related discipline, or equivalent experience.
• 2–5 years of cybersecurity, risk, or governance experience.
• Experience developing or enforcing policies, standards, or governance processes.
• Experience evaluating new technologies, vendors, or services from a risk/security perspective.

Responsibilities

• Monitor security systems, networks, apps, cloud platforms, and AI-enabled services for threats.
• Perform security risk assessments of systems, apps, AI solutions, and business processes.
• Develop and improve cybersecurity and AI governance policies, standards, and controls.

Skills

Cybersecurity experience

Risk management

Policy development

Stakeholder collaboration

AI governance

Written communication

Education

Bachelor's degree in related field

Tools

SIEM tools

Security monitoring platforms

Job description

Company Overview

Cogent Communications is a global, Tier 1 facilities-based ISP, consistently ranked as one of the top five networks in the world and is publicly traded on the NASDAQ Stock Market under the ticker symbol CCOI. Cogent specializes in providing businesses with high speed Internet access and Ethernet transport services. Cogent's facilities-based, all-optical IP network backbone provides IP services globally. Since its inception, Cogent has unleashed the benefits of IP technology, building one of the largest and highest capacity IP networks in the world. This network enables Cogent to offer large bandwidth connections at highly competitive prices. Cogent also offers superior customer support by virtue of its end-to-end control of service delivery and network monitoring. A competitive base salary and a full benefits package including; Health, Dental, Vision, Paid Time Off (PTO), Short and Long Term Disability, Life Insurance, Holidays, Parental Leave, 401(k) plan with employer match, stock options, and an Employee Assistance Program. Most benefits take effect within 30 days of employment, and some require a waiting period.

Job Summary

The Cybersecurity Analyst (Security & AI Governance) is responsible for protecting the organization's information assets, technology infrastructure, applications, cloud environments, data, and artificial intelligence (AI) initiatives from cyber threats and misuse. This role serves as a key contributor to both cybersecurity operations and AI governance programs by identifying, assessing, monitoring, and mitigating risks associated with Information Systems as well as AI-enabled technologies. The Cybersecurity Analyst (Security & AI Governance) works closely with IT teams, software developers, business stakeholders, and external partners to ensure cybersecurity and AI initiatives align with security policies, industry standards, regulatory requirements, and emerging AI governance frameworks. This position will work closely with the CIO/CISO functions to provide a cohesive plan for cybersecurity initiatives, AI governance, Shadow AI oversight, risk management, and continuous improvement initiatives.

Compensation

[Starting / Initial] Base Salary Pay Range: $110,000 - $130,000. Specific offers within the listed pay ranges are determined by a variety of factors such as experience, education, skills, certifications and business needs.

Essential Duties And Responsibilities

• Monitor security systems, networks, applications, cloud platforms, and AI-enabled services for suspicious activity and potential threats.
• Perform security assessments and risk analyses of systems, applications, AI solutions, and business processes.
• Assist in the development, implementation, and continuous improvements of cybersecurity and AI governance policies, standards, procedures, and controls.
• Collaborate with IT, software development, and business teams to implement security best practices and controls (security-by-design principles and secure technology solutions)
• Participate in the review, risk assessment, and governance oversight of internally developed AI solutions, machine learning models, and employee-driven AI initiatives.
• Evaluate third-party AI vendors, applications, and services for cybersecurity, privacy, compliance, data protection, and operational risks.
• Identify, assess, and monitor risks associated with generative AI, large language models (LLMs), machine learning platforms, prompt injection attacks, data leakage, insecure APIs, and AI supply chain vulnerabilities.
• Assist with the development and administration of the organization's AI governance and Shadow AI oversight programs.
• Support secure development practices for internally developed applications and AI-enabled solutions, and emerging technology initiatives.
• Participate in security awareness and AI awareness training initiatives for employees.
• Assist with audits, compliance reviews, AI governance assessments, and regulatory reporting requirements.
• Research emerging cybersecurity threats, vulnerabilities, cybersecurity trends, AI technologies, and industry best practices and recommend appropriate mitigation strategies/countermeasures.
• Maintain inventories of approved AI solutions, AI vendors, and AI-related business initiatives.
• Develop and maintain reports, dashboards, metrics, risk assessments, and documentation related to cybersecurity operations, AI governance, compliance and enterprise risk management activities.

Qualifications

• Associate's or Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Risk Management, Business, or a related discipline, or equivalent relevant professional experience.
• Minimum of 2–5 years of experience in cybersecurity, technology risk, GRC, application security, vendor risk, privacy, IT audit, compliance, technology governance, or a related discipline.
• Experience performing technology, security, vendor, application, privacy, or operational risk assessments.
• Experience developing, interpreting, implementing, or supporting technology policies, standards, procedures, or governance processes.
• Experience evaluating new technologies, applications, vendors, or services from a risk and security perspective.
• Experience working collaboratively with technical and non-technical stakeholders.
• Strong written and verbal communication skills, including the ability to document risks and develop recommendations for both technical and executive audiences.
• Demonstrated interest in artificial intelligence, generative AI, responsible AI adoption, and emerging technology risk.
• Familiarity with generative AI, machine learning concepts, large language models (LLMs), or AI-enabled business applications.

Proficient In The Following Areas

• Familiarity with AI governance principles and emerging AI risk management frameworks.
• AI governance concepts and risks associated with generative AI technologies.
• Data protection, data classification, privacy, and appropriate data use.
• Knowledge of application security concepts, API security, and secure software development practices.
• Understanding of risks associated with generative AI platforms, LLMs, prompt injection, data privacy, and AI model security.
• Ability to work independently and collaboratively in a fast-paced environment.
• Ability to independently research emerging technologies and translate findings into practical recommendations.
• Ability to write and present formal documentation, risk assessments, and executive-level reports.
• Knowledge of cybersecurity frameworks and standards, including CIS Controls, NIST Cybersecurity Framework, and security best practices.
• Experience with security information and event management (SIEM) tools and security monitoring platforms is a PLUS.
• Experience supporting software development, DevSecOps, or application security initiatives is a PLUS.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)
• CompTIA Security+
• GIAC Security Essentials (GSEC)
• Relevant AI Security, Cloud Security, Application Security, or Governance certifications are highly desirable.

Physical Requirements

• Remains in a sitting/stationary position continually or almost continually during the work day
• Operates a computer and performs desk-based computer tasks continually; frequently viewing a computer screen
• Rarely lifting, carrying, pushing, pulling objects and/or equipment that weighs up to 50 pounds

Cogent Communications is an Equal Opportunity Employer.