Information Security Analyst - Cyber AI Policy and Domain Governance

Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for an Information Security Analyst for Cyber AI Policy and Domain Governance in Chandler, AZ or Charlotte, NC (Hybrid).

Work with the brightest minds at one of the largest financial institutions in the world. This is a long-term contract opportunity that includes a competitive benefit package! Our client has been around for over 150 years and is continuously innovating in today's digital age. If you want to work for a company that is not only a household name, but also truly cares about satisfying customers' financial needs and helping people succeed financially, apply today.

Contract Duration: 12 Months

Required Skills & Experience

• 4+ years of Information Security Analysis experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.
• 4+ years of Information Security and Cloud experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 1+ years of experience assessing, implementing, or governing AI security requirements, including AI-specific risks such as prompt injection, model attacks, data poisoning, adversarial threats, secure AI development practices, or AI control frameworks

Desired Skills & Experience

• Familiarity with AI-specific and cloud specific cybersecurity risks, including adversarial attacks, model inversion, data poisoning, and prompt injection
• Knowledge of NIST AI RMF, and other emerging AI and cloud regulatory and compliance frameworks.
• Knowledge of COBIT, FedRamp, FFIEC, ISO, MITRE, NIST, CRI and other key industry frameworks and -authoritative sources
• Familiarity with cloud security concepts (shared responsibility model, continuous enforcement of secure configuration, Infrastructure and Policy as Code, etc.)??
• One or more professional certifications such as CISSP, CISA, CISM, CRISC, CGEIT?
• Strong critical thinking skills, consistent attention to detail, and ability to meet deadlines amidst competing priorities
• Comfortable with making and presenting recommendations to a wide audience of stakeholders?
• 6+ years hands-on experience working in Information Security / Cybersecurity domain
• 3+ in financial services or other highly-regulated industry; knowledge of the financial services regulatory environment
• Bachelor’s and/or master’s degree in engineering or computer Science or Information Systems

What You Will Be Doing

• Consult on or participate in moderately complex initiatives and deliverables within Information Security Analysis and contribute to large-scale planning related to Information Security Analysis deliverables.
• Review and analyze moderately complex Information Security Analysis challenges that require an in-depth evaluation of variable factors.
• Contribute to the resolution of moderately complex issues and consult with others to meet Information Security Analysis deliverables while leveraging solid understanding of the function, policies, procedures, and compliance requirements.
• Collaborate with client personnel in Information Security Analysis.
• Support alignment of AI and Cloud governance activities with strategic and transformational Cybersecurity objectives. Support governance activities related to AI regulatory requirements and industry frameworks, including NIST AI RMF.
• Support implementation and operationalization of the AI Security Governance Framework.
• Assess AI-specific cybersecurity risks and guardrails.
• Support the ongoing review and maintenance of the Cloud Control Framework (CCF) to incorporate changes in cloud technologies, industry best practices, and evolving threat landscapes.
• Coordinate governance deliverables and ensure timely execution across multiple programs.
• Evaluate and interpret Enterprise Information Security policies, standards, and processes and recommend enhancements related to Cloud and AI including Cloud Security Policy and Control uplift initiatives across public, private, and hybrid cloud environments.
• Review AI and cloud security tool portfolio coverage to ensure capabilities address emerging threats and align with organizational technology changes.
• Analyze, validate, and document Cloud Security Risk Observations from internal assessments, external reviews, and CCF validation activities, including tracking disposition, remediation paths, and supporting evidence.?
• Prepare and maintain audit-ready evidence, governance artifacts, risk documentation, and executive reporting packages.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.

Posted By: Natalie DeWitt