Manager, Technology, AI, and Security Risk

New Millenium Consulting; Fort Washington (Montgomery County); Hybrid; USD 140,000 - 190,000; Full time

Job summary

New Millenium Consulting in Fort Washington, PA, is seeking a Manager, Technology, AI, and Security Risk to lead the security risk assessment portfolio with hands-on technical and security-architecture focus. The role is hybrid with 1–2 days onsite and requires deep expertise in security reviews for AI systems, APIs, and cloud environments.

The position emphasizes governance, control framework management, external and third‑party risk, and cloud posture management, partnering with engineering

Qualifications

• Bachelor’s Degree in science, technology, engineering, or math discipline.
• 7 years related work experience.
• Preferred certifications: CISM, CISSP, CISA, CBCP.

Responsibilities

• Lead security architecture reviews across applications, AI systems, APIs, and cloud environments.
• Perform threat modeling and secure design reviews throughout the development lifecycle.
• Define technical assessment approach for AI/ML systems including governance and guardrails.
• Evaluate security controls across application, integration, and infrastructure layers.
• Own Security Risk Assessment portfolio end to end across GRC components.
• Lead cloud security posture management and IAM design.
• Assess external and third‑party risk with focus on data interfaces.
• Maintain cyber risk register and translate findings into risk decisions.
• Drive remediation from findings to technical closure.
• Ensure compliance with HIPAA, NIST, PCI and update secure-design standards.

Skills

Security governance

Risk assessment

Threat modeling

Cloud security

Education

Bachelor’s Degree in science, technology, engineering, or math discipline

Job description

Job title: Manager, Technology, AI, and Security Risk

Job type: Full time

Job location: Fort Washington, PA ( Hybrid-1- 2 days onsite)

A leading healthcare is seeking a Manager, Technology, AI, and Security Risk to lead the organization's Security Risk Assessment portfolio with a hands‑on technical and security architecture focus. The role is accountable for reviewing the architecture, design, and controls of internally developed applications, AI-enabled applications and agents, APIs and integrations, cloud environments, and external connections, and for turning those technical findings into clear, prioritized risk decisions. Alongside this technical work, the manager owns the broader Governance, Risk, and Compliance (GRC) components of the portfolio, including control framework management, enterprise and regulatory assessments, external and third‑party risk, cyber risk management, issues management, and cloud security and posture management, as well as the GRC platform and its AI-enablement capabilities. The position exists to ensure that as the organization expands its internal development and adoption of AI, it designs, builds, and operates those systems securely and in line with applicable legal and regulatory requirements.

Responsibilities

• Lead security architecture reviews across internally developed applications, AI systems and agents, APIs, and cloud environments, assessing design, data flows, trust boundaries, and control coverage both before and after deployment.
• Perform and oversee threat modeling and secure design reviews for custom-built and AI-enabled applications throughout the development lifecycle, identifying design-level weaknesses and driving fixes into engineering work.
• Define the technical assessment approach for AI and machine learning systems, covering model and data governance, prompt and agent security, guardrails, output validation, and misuse scenarios.
• Evaluate and validate security controls at the application, integration, and infrastructure layers, including authentication, authorization, encryption, logging, segmentation, and secrets management.
• Own the Security Risk Assessment portfolio end to end, ensuring a consistent and technically rigorous methodology, prioritization, and reporting across control framework management, enterprise and regulatory assessments, external and third‑party risk, cyber risk, issues management, and cloud posture.
• Lead cloud security posture management, including configuration and hardening review, identity and access design, and asset and attack‑surface visibility.
• Assess third‑party, medical device, and B2B integration risk with real attention to the technical interfaces, data exchange, and connectivity involved, not just questionnaire responses.
• Maintain the cyber risk register and apply quantitative analysis to technical findings, translating architecture and control gaps into decision‑ready risk.
• Drive remediation of findings from architecture reviews, assessments, audits, and testing through to validated technical closure.
• Ensure applications and platforms meet information security policies, standards, and applicable regulatory frameworks (e.g., HIPAA, NIST, PCI), and inform updates to technical and secure‑design standards as technology and threats evolve.
• Partner with engineering, cloud, data, and AI teams to embed security into how systems are designed, built, and run, advancing internal development and AI enablement securely.
• Advance AI enablement across the team, applying AI‑assisted automation to assessment, architecture review, and reporting workflows to strengthen efficiency gains and scale the portfolio's output.

Qualifications

Education - Required

• Bachelor’s Degree in science, technology, engineering, or math discipline

Experience - Required

• 7 years related work experience

Licenses and Certifications - Preferred

• CISM - Certified Information Security Manager - Information Systems Audit and Control Association
• CISSP - Certified Information Systems Security Professional - ISC2
• CISA - Certified Information Systems Auditor - Information Systems Audit and Control Association
• CBCP - Certified Business Continuity Planner - Disaster Recovery Institute Internationa