Information Security Analyst, AI Governance

Form Energy; Somerville (MA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Stock options

Competitive salary

Holistic benefits

Hybrid work model

Job summary

Form Energy in Somerville, MA is seeking an Information Security Analyst, AI Governance who will own the full lifecycle of AI tools: evaluating new AI applications before adoption, securing them against data-exposure and misuse, deploying and configuring them for business use, and managing ongoing performance, access, and governance. Relocation assistance is available.

You will lead security reviews of AI tools, manage deployment, maintain an inventory and risk register, and define guardrails

Qualifications

• Experience evaluating, deploying, or managing AI applications, copilots, or LLM-based tools in a business/enterprise IT setting.
• Knowledge of AI/LLM security concepts: data exfiltration risk, prompt injection, model access controls, plugin/tool permission scopes, and agent autonomy risk.
• Familiarity with SaaS security fundamentals: OAuth and API permission review, third‑party integration risk assessment, and access governance.

Responsibilities

• Own the intake and review process for new AI applications, skills, plugins, and agents - assess business value, data access, permission scope, and vendor security posture.
• Lead security review of AI tools, including data handling, model trust boundaries, prompt-injection and jailbreak exposure, third-party plugin risk, and integration permissions.
• Manage deployment and configuration of approved AI applications across the organization, including access provisioning and rollout communication.
• Establish and maintain an inventory and risk register of all AI applications, skills, plugins, and agents in use.
• Define and enforce guardrails for agentic tools, including autonomous actions, approvals, logging, and rollback procedures.
• Monitor usage, cost, and performance of deployed AI tools, and manage vendor relationships including renewals and updates.
• Collaborate with IT security, legal, and business stakeholders to develop AI usage policies and acceptable-use guidelines.
• Investigate and respond to AI-related incidents, coordinating remediation and post-incident review.
• Create lightweight docs, training, and office-hours support to help employees use approved AI tools safely.
• Stay current on AI tool landscape and flag emerging capabilities or risks.

Skills

AI security

SaaS security fundamentals

OAuth & API review

Stakeholder management

Project & program management

Clear communication

Job description

Are you ready to build America's energy future? Form Energy is an American manufacturing and energy technology company. We're revolutionizing energy storage with cost-effective, multi-day technology designed to keep the electric grid secure and reliable, even during extended periods of stress. By strengthening the electric system and reimagining what's possible, we're giving clean energy a whole new form!

In recent years, Form Energy has earned a number of accolades, including being named by TIME as a \"Best Invention\", MIT Technology Review as a \"Top Climate Tech Company To Watch\", and Fast Company as \"One of the Next Big Things In Tech\". We are making rapid progress on our mission of delivering energy storage for a better world, and our team is growing just as rapidly to meet demand. We have signed contracts with leading electric utilities across the United States and production of our iron-air batteries is underway at our first high-volume manufacturing facility in West Virginia.

Working for Form Energy is more than just a job, it's a chance to be part of something extraordinary. And now - right as we significantly scale up battery manufacturing - might be the most exciting moment in the company's history to join. We are assembling a team of highly talented and driven individuals across the country. Driven by our core values of humanity, excellence, and creativity, our team is determined to deliver on our mission and transform the energy landscape for the better.

Feeling energized to make a meaningful impact on the world? Then keep reading - you've come to the right place.

Role Description

As Form Energy scales, AI tools are becoming embedded in how our teams write, code, analyze, and make decisions - through AI applications, custom skills, plugins, and autonomous agents deployed across the business. The Information Security Analyst, AI Governance will own the full lifecycle of these tools: evaluating and reviewing new AI applications before adoption, securing them against data-exposure and misuse risk, deploying and configuring them for business use, and managing their ongoing performance, access, and governance. This is a hands-on, cross-functional role that combines security judgment, IT operations discipline, and a genuine curiosity about how AI systems behave - bridging the gap between fast-moving AI capabilities and the guardrails Form Energy needs to adopt them safely and effectively. Relocation assistance is available.

What you'll do:

• Own the intake and review process for new AI applications, skills, plugins, and agents - assessing business value, data access, permission scope, and vendor security posture before approval.

• Lead security review of AI tools, including evaluating data handling and retention practices, model/vendor trust boundaries, prompt-injection and jailbreak exposure, third-party plugin risk, and integration permissions (OAuth scopes, API access, connected data sources).

• Manage deployment and configuration of approved AI applications across the organization, including access provisioning, environment/tenant setup, and rollout communication and training.

• Establish and maintain an inventory and risk register of all AI applications, skills, plugins, and agents in use, tracking ownership, data scope, and review status - including inactive or abandoned deployments.

• Define and enforce guardrails for agentic tools specifically - reviewing what actions an agent is authorized to take autonomously (e.g., sending communications, modifying records, executing code) and setting approval thresholds, logging, and rollback procedures.

• Monitor usage, cost, and performance of deployed AI tools, and manage the ongoing vendor relationship including contract renewals, model/version updates, and deprecation planning.

• Partner with IT security, legal, and business stakeholders to develop and maintain AI usage policy, acceptable-use guidelines, and an approval workflow that scales with demand without becoming a bottleneck.

• Investigate and respond to AI-related incidents (e.g., data leakage through a connected tool, unexpected agent behavior, plugin compromise), coordinating remediation and post-incident review.

• Build lightweight documentation, training, and office-hours support to help employees use approved AI tools effectively and safely, and to route new requests through the review pipeline.

• Stay current on the fast-changing AI application, plugin, and agent landscape, and proactively flag emerging capabilities or risks relevant to Form Energy.

What you'll bring:

• Direct experience evaluating, deploying, or managing AI applications, copilots, or LLM-based tools in a business or enterprise IT setting.

• Working knowledge of AI/LLM security concepts - data exfiltration risk, prompt injection, model access controls, plugin/tool permission scopes, and agent autonomy risk.

• Comfort with SaaS security fundamentals: OAuth and API permission review, third-party integration risk assessment, and access governance.

• Strong stakeholder management skills: able to run an intake/review process that business teams actually use, and to say no to risky requests without becoming a blocker.

• Project and program management skills: able to track a growing portfolio of tools, vendors, and review cycles with clear documentation and measurable outcomes.

• Clear written and verbal communication; able to translate technical AI risk into guidance non-technical stakeholders can act on.

#LI-Hybrid

Humanity is a cornerstone of Form Energy's culture, and we make sure our compensation and benefits reflect that. Form Energy offers competitive salaries, stock options, and a holistic benefits package to ensure all employees have what they need to thrive while working here.

When it comes to you and your family's health, we cover 100% of medical, dental, and vision premiums for full-time employees - and 80% of healthcare premiums for dependents. This starts from day one. We also offer at least 12 weeks of paid leave for new parents (up to 20 weeks for birthing parents), and generous vacation policies to give employees time to recharge when needed.

To build America's energy future, we need everyone at the table. We are proud to be an equal opportunity employer, and encourage candidates from all backgrounds to apply to our open jobs.

If you may require reasonable accommodations to participate in our interview process, please contact . Requests for accommodations will be treated with discretion.
Form Energy is committed to maintaining the privacy of our applicants. Please be aware that we will never solicit sensitive personal information such as Social Security numbers or bank account details during the recruiting or hiring process.