AI Senior Security Architect - Security & Privacy

As an AI Senior Security Architect in Credera’s Technology Solutions practice, you will be a thought leader for the organization with a mission to bring an understanding of secure AI practices for clients across multiple industries.  You will combine technical knowledge with consulting acumen to help current and prospective Credera clients tackle the challenges involved with applying security principles to AI.

On a typical day, you could expect any or all of the following challenges:

• Develop high-level architectures and strategic roadmaps to either lay foundational security principles for new AI initiatives or retrofit those same security principles in existing but growing AI instances
• Serve as a SME to explain technical, compliance, and ethical principles and challenges to internal and external audiences
• Conduct thorough risk assessments of AI instances to identify vulnerabilities and potential threats, and develop strategies to mitigate them
• Ensure that AI solutions are compliant and adhere to relevant data privacy and security regulations (e.g., GDPR, HIPAA) and industry-specific standards (e.g., NIST, ISO 27001)
• Successfully navigate, develop, or augment KRIs, KPIs, Risk Registers, and Risk Treatment Plans
• Dig into contract documents (Master Service Agreements, Statements of Work, Privacy Addendums, Business Associate Agreements, Performance Work Statements, and the like) identifying flaws, weaknesses, and potential financial and reputational risk for both or all parties to the documents
• Mentor and grow junior security and privacy practitioners to help them understand the potential impact of AI on security and privacy
• Develop and refine business development efforts to incorporate AI security into both standalone work and combined with other Credera initiatives with new and existing clients
• Facilitate executive-level workshops both inside and outside of Credera.
• Provide industry thought leadership on AI Security by speaking at conferences, producing blogs, and joining technical and business podcasts.

WHO YOU ARE:

• You have a passion for the intersection of AI, Security, and Privacy and are fully immersed in the emerging technologies, principles, and challenges
• You have a proven track record as a consultant who can provide technical expertise and can navigate the complex challenges of consulting
• You are well-versed in current and emerging AI technologies and applications
• You are familiar with NIST AI 110-1, MITRE ATLAS, MITER ATT&CK
• You are familiar with common security attestation frameworks (ISO 27001, SOC 2, NIST CSF, COBIT) and can articulate how AI makes achieving those attestations both easier and more difficult
• You are an experienced, hands-on security practitioner with both practical experience in one or more of the major cloud platforms (AWS, Azure, GCP) and can approach security architecture and engineering issues holistically across physical and logical boundaries
• You have led cross-functional teams with a wide spectrum of technical, consulting, and security knowledgebases
• You hold senior-level technical security certifications (CISSP, CISM, CISA)
• You hold at least one privacy-related certification (CIPP, CIPM, CIPT, CDPSE)
• You are familiar with the legal and ethical challenges that AI presents when dealing with statutory and regulatory frameworks around privacy (i.e. CCPA, GDPR, MHMDA, HIPAA) and can immediately discern between a controller, a processor, and a data subject
• You are a skilled communicator across multiple mediums (spoken, written prose, presentation slides).
• You have strong interpersonal skills, and the ability to engage customers at a business level in addition to a technical level. You are able to handle complex organizational dynamics to deliver a solution to a client’s satisfaction
• You have a strong track record of mentoring and building your replacements so you can take on bigger challenges within your organization
• You are comfortable with code shifting multiples times during a workday to meet the needs of clients across many disciplines

WHO WE ARE:

• Credera is a full-service management consulting, user experience, and technology solutions firm, with clients ranging from Fortune 500 companies to emerging industry leaders
• Credera has received several state and national awards, including:
• Fortune'sBest Workplaces in Consulting & Professional Services  
• Fortune'sBest Workplaces in Texas
• Fortune’s