Director, AI Security: Build Strategy & Lead Secure AI

Gibson, Dunn & Crutcher; New York, Northern (NY, KY); Hybrid; USD 300,000 - 380,000; Full time

Benefits offered by this job

Health care

Retirement benefits

Paid time off and vacation

Parental leave

Life insurance

Flexible Spending Accounts

Discretionary bonuses

Job summary

Gibson Dunn, a leading global law firm based in New York, seeks a Director of AI Security to define and lead the firm’s AI security program. You will work directly with the CISO to design the team, budget, and roadmap, shaping how AI is securely adopted across the organization.

You will own the security review of AI use cases, establish controls against AI threats, and partner with legal and governance bodies to ensure compliant, confidential operations.

Qualifications

• Bachelor’s degree in CS/Cybersecurity/IT or equivalent experience.
• 10+ years information security experience.
• Deep experience securing production AI and LLM systems, including AI-specific threats.
• Security architecture across cloud (Azure/AWS) and SaaS-heavy environments.
• Certs such as CISSP/CCSP/CISM a plus.

Responsibilities

• Define the firm’s AI security strategy and multi-year roadmap with the CISO.
• Design, budget, recruit, and lead the AI security function; determine team structure and tooling.
• Establish the security control framework for AI systems.
• Own the security review stage of the AI use-case intake and approval process.
• Partner with the GC and Cyber & Data Governance Committee on confidentiality and privilege obligations.

Skills

Strategic thinking

Executive stakeholder engagement

Security architecture

Communication with clients/regulators

Education

Bachelor’s degree in CS/Cybersecurity/IT

Tools

OAuth 2.0

OIDC

SAML

Job description

Gibson Dunn, a leading global law firm based in New York, seeks a Director of AI Security to define and lead the firm’s AI security program. You will work directly with the CISO to design the team, budget, and roadmap, shaping how AI is securely adopted across the organization.

You will own the security review of AI use cases, establish controls against AI threats, and partner with legal and governance bodies to ensure compliant, confidential operations.