Lead AI Security Architect & Tech Reviewer

CNA Insurance; Chicago (IL); On-site; USD 97,000 - 189,000; Full time

Job summary

CNA Insurance in Chicago seeks a Consulting Director, AI Security who is a hands-on technical contributor reviewing, evaluating, and validating AI initiatives across CNA’s enterprise. You’ll perform architecture and design reviews of AI/ML, GenAI, LLM, and agentic solutions, and develop evaluation criteria for RFIs/RFPs while testing candidate solutions against security requirements.

You’ll apply deep technical expertise to identify risks, propose controls, and collaborate with Engineering,

Qualifications

• Bachelor’s degree in a technical discipline; 5+ years in information security.
• Hands-on cloud security experience with AWS and Google Cloud.
• Certifications such as CISSP, CCSP, GIAC preferred.

Responsibilities

• Review AI/ML security designs and assess risks and controls.
• Develop evaluation criteria for AI security tooling in RFIs/RFPs.
• Benchmark AI security solutions via proofs of concept.
• Conduct threat modeling and security risk assessments of AI systems.
• Evaluate AI workloads across cloud environments and recommend secure configurations.
• Support SDLC, CI/CD, and DevSecOps integration of AI security controls.
• Provide security input to risk, legal, and governance teams.
• Track emerging AI threats and defense techniques.

Skills

AI/ML security concepts

Security architecture reviews

Cloud security (AWS, GCP)

DevSecOps

Risk assessment

Technical communication

Education

Bachelor’s degree in a technical discipline

Certifications: CISSP/CCSP/GIAC or AI/cloud security credentials

Tools

AWS

Google Cloud

NIST/OWASP frameworks

Job description

CNA Insurance in Chicago seeks a Consulting Director, AI Security who is a hands-on technical contributor reviewing, evaluating, and validating AI initiatives across CNA’s enterprise. You’ll perform architecture and design reviews of AI/ML, GenAI, LLM, and agentic solutions, and develop evaluation criteria for RFIs/RFPs while testing candidate solutions against security requirements.

You’ll apply deep technical expertise to identify risks, propose controls, and collaborate with Engineering,