Position: Security Gen AI Security and NIST Framework Consultant
Type: Contract
Start Date: 10/31/2026
Duration: 6-12 Months
Location: Toronto, ON (Hybrid, 2 to 3 days onsite)
Security Consultant responsible for leading AI/GenAI security assessments, governance reviews, risk evaluations, and compliance initiatives while establishing secure AI adoption practices aligned with NIST AI RMF, ISO 42001, and enterprise security standards.
MANDATORY SKILLS
- 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
- Proven experience leading enterprise security assessments and advisory engagements.
- Strong expertise in: AI Security, Generative AI Security, AI Governance, Responsible AI
- AI Risk Management
- Deep understanding of: Large Language Models (LLMs), AI/ML Security, Prompt Security, Model Security
- Experience with: NIST AI RMF, MITRE ATLAS
KEY RESPONSIBILITIES
- Lead end-to-end AI Security Assessment engagements, including planning, execution, reporting, and stakeholder management.
- Conduct AI and Generative AI security, governance, risk, and compliance assessments.
- Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
- Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
- Perform AI threat modeling and identify risks such as:
- Prompt Injection
- Data Leakage
- Model Abuse
- Supply Chain Vulnerabilities
- Evaluate controls against:
- NIST AI Risk Management Framework (AI RMF)
- ISO 42001
- OWASP LLM Top 10
- Enterprise Security Standards
- Develop gap assessments, risk ratings, maturity assessments, and remediation roadmaps.
- Create executive-level reports, presentation materials, and security recommendations.
- Provide strategic guidance for secure AI adoption, governance, and operationalization.
- Manage project governance, timelines, risks, issues, and stakeholder communications.
- Support AI security program development and responsible AI initiatives.
KEY SKILLS
- Artificial Intelligence (AI)
- Generative AI
- AI Security
- GenAI Security
- Large Language Models (LLMs)
- AI Governance
- Responsible AI
- NIST AI RMF
- ISO 42001
- MITRE ATLAS
- OWASP LLM Top 10
- Threat Modeling
- Microsoft Copilot Security
- Azure OpenAI
- Cloud Security
- Risk Management
- Security Assessments
- Compliance
- Cybersecurity
- Stakeholder Management
- Security Consulting
- Executive Reporting
CORE QUALIFICATIONS
- 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
- Proven experience leading enterprise security assessments and advisory engagements.
- Strong expertise in: AI Security, Generative AI Security, AI Governance, Responsible AI
- AI Risk Management
- Deep understanding of: Large Language Models (LLMs), AI/ML Security, Prompt Security, Model Security
- Experience with: NIST AI RMF, MITRE ATLAS
- AI Threat Modeling
- Security Risk Assessments
- Experience assessing cloud-based AI services and AI-enabled applications.
- Strong knowledge of Microsoft Copilot and Azure OpenAI security controls.
- Experience with security compliance, governance, and regulatory frameworks.
- Strong stakeholder management, workshop facilitation, and consulting skills.
- Excellent executive communication and presentation skills.
PREFERRED QUALIFICATIONS
- Experience implementing AI governance frameworks within large enterprises.
- Experience supporting Microsoft Copilot, Azure OpenAI, or enterprise GenAI initiatives.
- Knowledge of ISO 42001 and emerging AI regulations.
- Experience working with cloud security architectures across Azure, AWS, and GCP.
- Experience building AI security roadmaps and maturity improvement programs.
- Relevant cybersecurity certifications such as CISSP, CCSP, CISM, or equivalent.
