VP – AI Security and Data Protection Governance and Controls

Jobtailor; United States; On-site; USD 180,000 - 280,000; Full time

Job summary

Jobtailor is seeking a senior leader to establish and maintain an enterprise governance framework for AI security, data protection, and evolving technology risk. You will oversee risk-based prioritization, control design, and remediation across the tech stack while guiding third-party due diligence and executive communications.

The role requires a decade of cybersecurity and risk governance experience, with strong leadership, policy development, and regulatory interaction capabilities.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Engineering, Mathematics, AI Security and Data Protection, or a related discipline.

Responsibilities

• Establish and maintain the enterprise governance framework, policies, standards, decision rights, and accountability model for AI security, data protection, and evolving tech risk.
• Govern discovery, inventory, classification, and risk assessment of AI models, data assets, security controls, platforms, applications, integrations, and technology dependencies.
• Define risk-based prioritization criteria using data sensitivity, retention period, business criticality, external exposure, and migration complexity.
• Design minimum control requirements, testing procedures, evidence standards, exception processes, compensating controls, and remediation expectations across apps, infrastructure, cloud, networks, identity, and data platforms.
• Establish and oversee the roadmap for transitioning vulnerable security and data protection implementations to approved secure technologies and control solutions.
• Partner with Security Architecture and Engineering to embed AI security, data protection, security-by-design, and adaptable control requirements into solution design and reviews.
• Define AI security and data protection requirements and due diligence criteria for third-party products, cloud services, vendors, contracts, and evaluations.
• Serve as subject-matter authority in engagements with senior leadership, Risk, Compliance, Internal Audit, external auditors, clients, and regulators.
• Establish dashboards, key risk indicators, and performance measures for inventory coverage, risk exposure, control compliance, and remediation.
• Lead and develop a team responsible for governance, control oversight, risk assessment, program coordination, and cross-functional execution.

Skills

AI Security

Data Protection

Governance

Risk Assessment

Executive Communication

Cross-Functional Coordination

Security-by-Design

Policy Development

Cloud Security

Regulatory Compliance

Education

Bachelor’s degree in Information Security / CS / Engineering

Tools

Asset Management Platforms

GRC Platforms

Dashboard Technologies

PKI / Certificate Management

Job description

• Establish and maintain the enterprise governance framework, policies, standards, decision rights, and accountability model for AI security, data protection, and emerging technology risk
• Govern discovery, inventory, classification, and risk assessment of AI models, data assets, security controls, platforms, applications, integrations, and technology dependencies
• Define risk-based prioritization criteria using data sensitivity, retention period, business criticality, external exposure, and migration complexity
• Design minimum control requirements, testing procedures, evidence standards, exception processes, compensating controls, and remediation expectations across applications, infrastructure, cloud, networks, identity, and data platforms
• Establish and oversee the roadmap for transitioning vulnerable security and data protection implementations to approved secure technologies and control solutions
• Partner with Security Architecture and Engineering to embed AI security, data protection, security-by-design, and adaptable control requirements into solution design, architecture reviews, engineering standards, and reusable implementation patterns
• Define AI security and data protection requirements and due-diligence criteria for third-party products, cloud services, strategic vendors, contracts, and technology evaluations
• Serve as subject-matter authority in engagements with senior leadership, Risk, Compliance, Internal Audit, external auditors, clients, and regulators
• Establish dashboards, key risk indicators, and performance measures for inventory coverage, risk exposure, control compliance, exceptions, migration progress, remediation, and residual risk
• Lead and develop a team responsible for governance, control oversight, risk assessment, program coordination, and cross-functional execution

Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering, Mathematics, AI Security and Data Protection, or a related discipline
• 10+ years of progressive experience in cybersecurity, AI security, data protection, security architecture, technology risk, or control governance
• Deep understanding of AI security, data protection, security architecture, governance, risk, control principles, security-by-design, resilient controls, and adaptable technology standards
• Ability to translate complex technical and emerging risks into policies, standards, controls, investment priorities, and executive decisions
• Strong governance, technology risk, control design, exception management, and assurance capabilities within a large, regulated organization
• Proven leadership of complex, cross-functional cybersecurity or technology transformation programs with measurable outcomes and clear accountability
• Executive communication and influencing skills across Security, Engineering, Infrastructure, Cloud, Application Development, Risk, Legal, Procurement, Audit, and business teams
• Data-driven, risk-based decision making with attention to detail and strategic judgment
• Ability to coordinate across global teams and time zones
• Ability to support regulatory and audit engagements as needed
• Ability to manage sensitive information in accordance with company requirements
• Experience developing enterprise security policies, standards, and controls
• Experience leading cross-functional transformation
• Experience engaging vendors
• Experience communicating with executive, audit, regulatory, and non-technical audiences in a large, highly regulated organization
• Certifications such as CISSP, CISM, CRISC, CCSP, cloud security, or comparable industry certifications preferred
• Knowledge of security and data protection discovery and inventory capabilities, PKI, certificate and key management, cloud and enterprise security architectures, asset/configuration/GRC platforms, and reporting or dashboard technologies
• Standard business hours with flexibility to support global stakeholders and critical program or regulatory needs
• Travel may be required based on business needs

Core Competencies

Demonstrates expertise in establishing governance frameworks, risk assessment, and control design for AI security and data protection. Proven ability to lead cross-functional teams and communicate effectively with executive stakeholders in a regulated environment.

Highest-signal resume keywords

• AI Security
• Data Protection
• Governance Frameworks
• Cybersecurity Leadership
• Risk Assessment

Hard Skills

• Cybersecurity
• Security Architecture
• Control Governance
• Risk Management
• Policy Development
• Exception Management
• Data Sensitivity Analysis
• Control Design
• Technology Risk Assessment
• Cloud Security

Soft Skills

• Executive Communication
• Influencing Skills
• Cross-Functional Coordination
• Attention to Detail
• Strategic Judgment

Certifications & Qualifications

• CISSP
• CISM
• CRISC
• CCSP

Industry Keywords

• Emerging Technology Risk
• Security-by-Design
• Regulatory Compliance
• Audit Engagements
• Third-Party Risk Management

Tools & Technologies

• Asset Management Platforms
• GRC Platforms
• Dashboard Technologies
• PKI
• Certificate Management